feat: add a simple grant exchange endpoint

1 files changed, 14 insertions, 1 deletions

diff --git a/bin/idp b/bin/idp
index b8539014..4df50157 100755
--- a/bin/idp
+++ b/bin/idp
@@ -77,7 +77,12 @@ class IdentityProvider
       when "/oauth/authorize" # RFC-6749
         return post_authorize(Rack::Request.new(env))
       when "/oauth/token" # RFC-6749
-        return not_found
+        return [200, { 'Content-Type' => "application/json" }, [JSON.pretty_generate({
+          access_token: to_jwt(sub: SecureRandom.uuid, iat: Time.now.to_i),
+          token_type: "Bearer",
+          expires_in: 3600,
+          refresh_token: SecureRandom.hex(32)
+        })]]
       when "/oauth/revoke" # RFC-7009
         return not_found
       else
@@ -89,6 +94,14 @@ class IdentityProvider
 
   private
 
+  def to_jwt(claims)
+    [
+      Base64.strict_encode64(JSON.generate({alg: "RS256", typ: "JWT"})),
+      Base64.strict_encode64(JSON.generate(claims)),
+      Base64.strict_encode64(JSON.generate({})),
+    ].join(".")
+  end
+
   # Download IDP Metadata
   #
   # GET /metadata.xml