Function createAccessTokenSession has 5 arguments (exceeds 4 allowed). Consider refactoring.

Open

func createAccessTokenSession(subject, client string, token string, expiresAt time.Time, fs x.FositeStorer, scopes fosite.Arguments) {

Function doTestRollback has 5 arguments (exceeds 4 allowed). Consider refactoring.

Open

func doTestRollback(m InternalRegistry, t *testing.T,
    createFn func(context.Context, string, fosite.Requester) error,
    getFn func(context.Context, string, fosite.Session) (fosite.Requester, error),
    revokeFn func(context.Context, string) error,

Method MockOAuth2Provider.IntrospectToken has 5 arguments (exceeds 4 allowed). Consider refactoring.

Open

func (m *MockOAuth2Provider) IntrospectToken(arg0 context.Context, arg1 string, arg2 fosite.TokenType, arg3 fosite.Session, arg4 ...string) (fosite.TokenType, fosite.AccessRequester, error) {

Method Persister.createSession has 5 arguments (exceeds 4 allowed). Consider refactoring.

Open

func (p *Persister) createSession(ctx context.Context, signature string, requester fosite.Requester, table tableName, expiresAt time.Time) error {

Function assertCreateVerifiableCredential has 5 arguments (exceeds 4 allowed). Consider refactoring.

Open

func assertCreateVerifiableCredential(t *testing.T, reg driver.Registry, nonce string, accessToken *oauth2.Token, alg jose.SignatureAlgorithm) {

Function executeHookAndUpdateSession has 5 arguments (exceeds 4 allowed). Consider refactoring.

Open

func executeHookAndUpdateSession(ctx context.Context, reg x.HTTPClientProvider, hookConfig *config.HookConfig, reqBodyBytes []byte, session *Session) error {

Method DefaultStrategy.HandleOAuth2AuthorizationRequest has 5 return statements (exceeds 4 allowed).

Open

func (s *DefaultStrategy) HandleOAuth2AuthorizationRequest(
    ctx context.Context,
    w http.ResponseWriter,
    r *http.Request,
    req fosite.AuthorizeRequester,

Method DefaultStrategy.ObfuscateSubjectIdentifier has 5 return statements (exceeds 4 allowed).

Open

func (s *DefaultStrategy) ObfuscateSubjectIdentifier(ctx context.Context, cl fosite.Client, subject, forcedIdentifier string) (string, error) {
    if c, ok := cl.(*client.Client); ok && c.SubjectType == "pairwise" {
        algorithm, ok := s.r.SubjectIdentifierAlgorithm(ctx)[c.SubjectType]
        if !ok {
            return "", errorsx.WithStack(fosite.ErrInvalidRequest.WithHintf(`Subject Identifier Algorithm '%s' was requested by OAuth 2.0 Client '%s' but is not configured.`, c.SubjectType, c.GetID()))

Method OAuth2ApiService.SetOAuth2ClientExecute has a Cognitive Complexity of 22 (exceeds 20 allowed). Consider refactoring.

Open

func (a *OAuth2ApiService) SetOAuth2ClientExecute(r ApiSetOAuth2ClientRequest) (*OAuth2Client, *http.Response, error) {
    var (
        localVarHTTPMethod  = http.MethodPut
        localVarPostBody    interface{}
        formFiles           []formFile

• Read up
  Read up

Method XChaCha20Poly1305.Decrypt has 5 return statements (exceeds 4 allowed).

Open

func (x *XChaCha20Poly1305) Decrypt(ctx context.Context, ciphertext string, aad []byte) (plaintext []byte, err error) {
    msg, err := base64.URLEncoding.DecodeString(ciphertext)
    if err != nil {
        return nil, errorsx.WithStack(err)
    }

Method Flow.HandleConsentRequest has 5 return statements (exceeds 4 allowed).

Open

func (f *Flow) HandleConsentRequest(r *AcceptOAuth2ConsentRequest) error {
    if time.Time(r.HandledAt).IsZero() {
        return errors.New("refusing to handle a consent request with null HandledAt")
    }

Method XChaCha20Poly1305.Encrypt has 5 return statements (exceeds 4 allowed).

Open

func (x *XChaCha20Poly1305) Encrypt(ctx context.Context, plaintext, additionalData []byte) (string, error) {
    key, err := encryptionKey(ctx, x.d, chacha20poly1305.KeySize)
    if err != nil {
        return "", err
    }

Method tlsConfig.GetCertificateFunc has 5 return statements (exceeds 4 allowed).

Open

func (c *tlsConfig) GetCertificateFunc(stopReload <-chan struct{}, log *logrusx.Logger) (func(*tls.ClientHelloInfo) (*tls.Certificate, error), error) {
    if c.certPath != "" && c.keyPath != "" { // attempt to load from disk first (enables hot-reloading)
        ctx, cancel := context.WithCancel(context.Background())
        go func() {
            <-stopReload

Function NewGetJWKSCmd has 5 return statements (exceeds 4 allowed).

Open

func NewGetJWKSCmd() *cobra.Command {
    cmd := &cobra.Command{
        Use:     "jwk set-1 [set-2] ...",
        Aliases: []string{"jwks"},
        Args:    cobra.MinimumNArgs(1),

Method DefaultProvider.getHookConfig has 5 return statements (exceeds 4 allowed).

Open

func (p *DefaultProvider) getHookConfig(ctx context.Context, key string) *HookConfig {
    if hookURL := p.getProvider(ctx).RequestURIF(key, nil); hookURL != nil {
        return &HookConfig{
            URL: hookURL.String(),
        }

Method MigrateHandler.makePersister has 5 return statements (exceeds 4 allowed).

Open

func (h *MigrateHandler) makePersister(cmd *cobra.Command, args []string) (p persistence.Persister, err error) {
    var d driver.Registry

    if flagx.MustGetBool(cmd, "read-from-env") {
        d, err = driver.New(

Method OidcConfiguration.ToMap has a Cognitive Complexity of 22 (exceeds 20 allowed). Consider refactoring.

Open

func (o OidcConfiguration) ToMap() (map[string]interface{}, error) {
    toSerialize := map[string]interface{}{}
    toSerialize["authorization_endpoint"] = o.AuthorizationEndpoint
    if !IsNil(o.BackchannelLogoutSessionSupported) {
        toSerialize["backchannel_logout_session_supported"] = o.BackchannelLogoutSessionSupported

• Read up
  Read up

Function NewCreateJWKSCmd has 5 return statements (exceeds 4 allowed).

Open

func NewCreateJWKSCmd() *cobra.Command {
    const alg = "alg"
    const use = "use"

    cmd := &cobra.Command{

Function NewPerformClientCredentialsCmd has 5 return statements (exceeds 4 allowed).

Open

func NewPerformClientCredentialsCmd() *cobra.Command {
    cmd := &cobra.Command{
        Use:     "client-credentials",
        Args:    cobra.NoArgs,
        Example: `{{ .CommandPath }} --client-id ... --client-secret`,

Method Validator.ValidateDynamicRegistration has 5 return statements (exceeds 4 allowed).

Open

func (v *Validator) ValidateDynamicRegistration(ctx context.Context, c *Client) error {
    if c.Metadata != nil {
        return errorsx.WithStack(ErrInvalidClientMetadata.
            WithHint(`"metadata" cannot be set for dynamic client registration`),
        )