Method OAuth2Client.ToMap has a Cognitive Complexity of 48 (exceeds 20 allowed). Consider refactoring.

Open

func (o OAuth2Client) ToMap() (map[string]interface{}, error) {
    toSerialize := map[string]interface{}{}
    if !IsNil(o.AccessTokenStrategy) {
        toSerialize["access_token_strategy"] = o.AccessTokenStrategy
    }

• Read up
  Read up

Function TestHandler has a Cognitive Complexity of 48 (exceeds 20 allowed). Consider refactoring.

Open

func TestHandler(t *testing.T) {
    ctx := context.Background()
    reg := internal.NewMockedRegistry(t, &contextx.Default{})
    h := client.NewHandler(reg)
    reg.WithContextualizer(&contextx.TestContextualizer{})

• Read up
  Read up

Method OAuth2Client.ToMap has 146 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func (o OAuth2Client) ToMap() (map[string]interface{}, error) {
    toSerialize := map[string]interface{}{}
    if !IsNil(o.AccessTokenStrategy) {
        toSerialize["access_token_strategy"] = o.AccessTokenStrategy
    }

Persister has 36 methods (exceeds 20 allowed). Consider refactoring.

Open

func (p *Persister) RevokeSubjectConsentSession(ctx context.Context, user string) error {
    ctx, span := p.r.Tracer(ctx).Tracer().Start(ctx, "persistence.sql.RevokeSubjectConsentSession")
    defer span.End()

    return p.Transaction(ctx, p.revokeConsentSession("consent_challenge_id IS NOT NULL AND subject = ?", user))

Method DefaultStrategy.issueLogoutVerifier has 140 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func (s *DefaultStrategy) issueLogoutVerifier(ctx context.Context, w http.ResponseWriter, r *http.Request) (*flow.LogoutResult, error) {
    // There are two types of log out flows:
    //
    // - RP initiated logout
    // - OP initiated logout

Function NewImportClientCmd has a Cognitive Complexity of 46 (exceeds 20 allowed). Consider refactoring.

Open

func NewImportClientCmd() *cobra.Command {
    cmd := &cobra.Command{
        Use:     "oauth2-client <file-1.json> [<file-2.json> ...]",
        Aliases: []string{"client", "clients", "oauth2-clients"},
        Short:   "Import one or more OAuth 2.0 Clients from files or STDIN",

• Read up
  Read up

Function TestValidate has 139 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func TestValidate(t *testing.T) {
    ctx := context.Background()
    c := internal.NewConfigurationWithDefaults()
    c.MustSet(ctx, config.KeySubjectTypesSupported, []string{"pairwise", "public"})
    c.MustSet(ctx, config.KeyDefaultClientScope, []string{"openid"})

Function TestCreateCsrfSession has 138 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func TestCreateCsrfSession(t *testing.T) {
    type cookie struct {
        httpOnly bool
        secure   bool
        domain   string

Function TestKeyManager_GetKeySet has 138 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func TestKeyManager_GetKeySet(t *testing.T) {
    ctrl := gomock.NewController(t)
    hsmContext := NewMockContext(ctrl)
    defer ctrl.Finish()
    l := logrusx.New("", "")

TrustedOAuth2JwtGrantIssuer has 34 methods (exceeds 20 allowed). Consider refactoring.

Open

type TrustedOAuth2JwtGrantIssuer struct {
    // The \"allow_any_subject\" indicates that the issuer is allowed to have any principal as the subject of the JWT.
    AllowAnySubject *bool `json:"allow_any_subject,omitempty"`
    // The \"created_at\" indicates, when grant was created.
    CreatedAt *time.Time `json:"created_at,omitempty"`

VerifiableCredentialPrimingResponse has 34 methods (exceeds 20 allowed). Consider refactoring.

Open

type VerifiableCredentialPrimingResponse struct {
    CNonce           *string `json:"c_nonce,omitempty"`
    CNonceExpiresIn  *int64  `json:"c_nonce_expires_in,omitempty"`
    Error            *string `json:"error,omitempty"`
    ErrorDebug       *string `json:"error_debug,omitempty"`

OAuth2LoginRequest has 34 methods (exceeds 20 allowed). Consider refactoring.

Open

type OAuth2LoginRequest struct {
    // ID is the identifier (\"login challenge\") of the login request. It is used to identify the session.
    Challenge   string                                    `json:"challenge"`
    Client      OAuth2Client                              `json:"client"`
    OidcContext *OAuth2ConsentRequestOpenIDConnectContext `json:"oidc_context,omitempty"`

GenericError has 34 methods (exceeds 20 allowed). Consider refactoring.

Open

type GenericError struct {
    // The status code
    Code *int64 `json:"code,omitempty"`
    // Debug information  This field is often not exposed to protect against leaking sensitive information.
    Debug *string `json:"debug,omitempty"`

Method DefaultStrategy.verifyAuthentication has 130 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func (s *DefaultStrategy) verifyAuthentication(
    ctx context.Context,
    w http.ResponseWriter,
    r *http.Request,
    req fosite.AuthorizeRequester,

Method Handler.createVerifiableCredential has 126 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func (h *Handler) createVerifiableCredential(w http.ResponseWriter, r *http.Request) {
    ctx := r.Context()
    session := NewSessionWithCustomClaims(ctx, h.c, "")
    accessToken := fosite.AccessTokenFromRequest(r)
    tokenType, _, err := h.r.OAuth2Provider().IntrospectToken(ctx, accessToken, fosite.AccessToken, session)

Function TestClientSDK has 125 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func TestClientSDK(t *testing.T) {
    ctx := context.Background()
    conf := internal.NewConfigurationWithDefaults()
    conf.MustSet(ctx, config.KeySubjectTypesSupported, []string{"public"})
    conf.MustSet(ctx, config.KeyDefaultClientScope, []string{"foo", "bar"})

Persister has 32 methods (exceeds 20 allowed). Consider refactoring.

Open

func (p *Persister) sqlSchemaFromRequest(ctx context.Context, signature string, r fosite.Requester, table tableName, expiresAt time.Time) (*OAuth2RequestSQL, error) {
    subject := ""
    if r.GetSession() == nil {
        p.l.Debugf("Got an empty session in sqlSchemaFromRequest")
    } else {

File api_jwk.go has 582 lines of code (exceeds 500 allowed). Consider refactoring.

Open

/*
Ory Hydra API

Documentation for all of Ory Hydra's APIs.

Function NewPerformAuthorizationCodeCmd has a Cognitive Complexity of 41 (exceeds 20 allowed). Consider refactoring.

Open

func NewPerformAuthorizationCodeCmd() *cobra.Command {
    cmd := &cobra.Command{
        Use:     "authorization-code",
        Example: "{{ .CommandPath }} --client-id ... --client-secret ...",
        Short:   "An exemplary OAuth 2.0 Client performing the OAuth 2.0 Authorize Code Flow",

• Read up
  Read up

Method Validator.Validate has 117 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func (v *Validator) Validate(ctx context.Context, c *Client) error {
    if c.TokenEndpointAuthMethod == "" {
        c.TokenEndpointAuthMethod = "client_secret_basic"
    } else if c.TokenEndpointAuthMethod == "private_key_jwt" {
        if len(c.JSONWebKeysURI) == 0 && c.JSONWebKeys == nil {