ory-am/hydra

Method PersisterTestSuite.TestListUserAuthenticatedClientsWithBackChannelLogout has 71 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func (s *PersisterTestSuite) TestListUserAuthenticatedClientsWithBackChannelLogout() {
    t := s.T()
    for k, r := range s.registries {
        t.Run(k, func(t *testing.T) {
            c1 := &client.Client{ID: "client-1", BackChannelLogoutURI: "not-null"}

Method PersisterTestSuite.TestListUserAuthenticatedClientsWithFrontChannelLogout has 71 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func (s *PersisterTestSuite) TestListUserAuthenticatedClientsWithFrontChannelLogout() {
    t := s.T()
    for k, r := range s.registries {
        t.Run(k, func(t *testing.T) {
            c1 := &client.Client{ID: "client-1", FrontChannelLogoutURI: "not-null"}

Method DefaultStrategy.issueLogoutVerifier has 20 return statements (exceeds 4 allowed).

Open

func (s *DefaultStrategy) issueLogoutVerifier(ctx context.Context, w http.ResponseWriter, r *http.Request) (*flow.LogoutResult, error) {
    // There are two types of log out flows:
    //
    // - RP initiated logout
    // - OP initiated logout

Similar blocks of code found in 4 locations. Consider refactoring.

Open

        t.Run("case=CreatePKCERequestSession", func(t *testing.T) {
            id := uuid.New()
            err := m.CreatePKCERequestSession(ctx, id, &request)
            require.NoError(t, err)

• Read up
  Read up

Similar blocks of code found in 4 locations. Consider refactoring.

Open

        t.Run("case=CreateOpenIDConnectSession", func(t *testing.T) {
            id := uuid.New()
            err := m.CreateOpenIDConnectSession(ctx, id, &request)
            require.NoError(t, err)

• Read up
  Read up

Similar blocks of code found in 4 locations. Consider refactoring.

Open

        t.Run("case=CreateRefreshTokenSession", func(t *testing.T) {
            id := uuid.New()
            err := m.CreateRefreshTokenSession(ctx, id, &request)
            require.NoError(t, err)

• Read up
  Read up

Similar blocks of code found in 4 locations. Consider refactoring.

Open

        t.Run("case=CreateAuthorizeCodeSession", func(t *testing.T) {
            id := uuid.New()
            err := m.CreateAuthorizeCodeSession(ctx, id, &request)
            require.NoError(t, err)

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

        const nc = () => ({
          client_secret: prng(),
          scope: "offline_access openid",
          subject_type: "public",
          token_endpoint_auth_method: "client_secret_basic",

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

      const nc = () => ({
        client_secret: prng(),
        scope: "openid",
        subject_type: "public",
        token_endpoint_auth_method: "client_secret_basic",

• Read up
  Read up

Similar blocks of code found in 3 locations. Consider refactoring.

Open

    t.Run("case=remote-matches-cidr", func(t *testing.T) {
        c.MustSet(context.Background(), config.KeyTLSAllowTerminationFrom, []string{"126.0.0.1/24", "127.0.0.1/24"})

        res := httptest.NewRecorder()
        RejectInsecureRequests(r, c.TLS(context.Background(), config.PublicInterface))(res, &http.Request{

• Read up
  Read up

Similar blocks of code found in 3 locations. Consider refactoring.

Open

    t.Run("case=remote-not-in-cidr", func(t *testing.T) {
        c.MustSet(context.Background(), config.KeyTLSAllowTerminationFrom, []string{"126.0.0.1/24", "127.0.0.1/24"})

        res := httptest.NewRecorder()
        RejectInsecureRequests(r, c.TLS(context.Background(), config.PublicInterface))(res, &http.Request{

• Read up
  Read up

Similar blocks of code found in 3 locations. Consider refactoring.

Open

    t.Run("case=x-forwarded-proto-is-http", func(t *testing.T) {
        c.MustSet(context.Background(), config.KeyTLSAllowTerminationFrom, []string{"126.0.0.1/24", "127.0.0.1/24"})

        res := httptest.NewRecorder()
        RejectInsecureRequests(r, c.TLS(context.Background(), config.PublicInterface))(res, &http.Request{

• Read up
  Read up

Method Handler.acceptOAuth2LoginRequest has 69 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func (h *Handler) acceptOAuth2LoginRequest(w http.ResponseWriter, r *http.Request, _ httprouter.Params) {
    ctx := r.Context()

    challenge := stringsx.Coalesce(
        r.URL.Query().Get("login_challenge"),

Method OAuth2APIService.IntrospectOAuth2TokenExecute has 69 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func (a *OAuth2APIService) IntrospectOAuth2TokenExecute(r ApiIntrospectOAuth2TokenRequest) (*IntrospectedOAuth2Token, *http.Response, error) {
    var (
        localVarHTTPMethod  = http.MethodPost
        localVarPostBody    interface{}
        formFiles           []formFile

Method Validator.Validate has 19 return statements (exceeds 4 allowed).

Open

func (v *Validator) Validate(ctx context.Context, c *Client) error {
    if c.TokenEndpointAuthMethod == "" {
        c.TokenEndpointAuthMethod = "client_secret_basic"
    } else if c.TokenEndpointAuthMethod == "private_key_jwt" {
        if len(c.JSONWebKeysURI) == 0 && c.JSONWebKeys == nil {

Function MockConsentRequest has 68 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func MockConsentRequest(key string, remember bool, rememberFor int, hasError bool, skip bool, authAt bool, loginChallengeBase string, network string) (c *flow.OAuth2ConsentRequest, h *flow.AcceptOAuth2ConsentRequest, f *flow.Flow) {
    c = &flow.OAuth2ConsentRequest{
        ID:                makeID("challenge", network, key),
        RequestedScope:    []string{"scopea" + key, "scopeb" + key},
        RequestedAudience: []string{"auda" + key, "audb" + key},

Method Handler.getOidcUserInfo has 68 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func (h *Handler) getOidcUserInfo(w http.ResponseWriter, r *http.Request) {
    ctx := r.Context()
    session := NewSessionWithCustomClaims(ctx, h.c, "")
    tokenType, ar, err := h.r.OAuth2Provider().IntrospectToken(ctx, fosite.AccessTokenFromRequest(r), fosite.AccessToken, session)
    if err != nil {

Similar blocks of code found in 2 locations. Consider refactoring.

Open

        {
            ID:             fmt.Sprintf("%s_flush-access-3", uniqueName),
            RequestedAt:    time.Now().Round(time.Second).Add(-(lifespan + time.Hour)),
            Client:         &client.Client{ID: fmt.Sprintf("%s_flush-access-3", uniqueName)},
            RequestedScope: fosite.Arguments{"fa", "ba"},

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

        {
            ID:             fmt.Sprintf("%s_flush-access-2", uniqueName),
            RequestedAt:    time.Now().Round(time.Second).Add(-(lifespan + time.Minute)),
            Client:         &client.Client{ID: fmt.Sprintf("%s_flush-access-2", uniqueName)},
            RequestedScope: fosite.Arguments{"fa", "ba"},

• Read up
  Read up

Method OAuth2APIService.AcceptOAuth2ConsentRequestExecute has 67 lines of code (exceeds 50 allowed). Consider refactoring.

Open

func (a *OAuth2APIService) AcceptOAuth2ConsentRequestExecute(r ApiAcceptOAuth2ConsentRequestRequest) (*OAuth2RedirectTo, *http.Response, error) {
    var (
        localVarHTTPMethod  = http.MethodPut
        localVarPostBody    interface{}
        formFiles           []formFile