add tests for .well-known/openid-configuration

4 files changed, 88 insertions, 12 deletions

diff --git a/pkg/web/http_context.go b/pkg/web/http_context.go
new file mode 100644
index 0000000..e104a48
--- /dev/null
+++ b/pkg/web/http_context.go
@@ -0,0 +1,17 @@
+package web
+
+import "log"
+
+type HttpContext struct {
+	issuer  string
+	keyData []byte
+	log     *log.Logger
+}
+
+func NewHttpContext(issuer string, keyData []byte) *HttpContext {
+	return &HttpContext{
+		issuer:  issuer,
+		keyData: keyData,
+		log:     log.Default(),
+	}
+}
diff --git a/pkg/web/mux.go b/pkg/web/mux.go
index 7957bda..e3376cd 100644
--- a/pkg/web/mux.go
+++ b/pkg/web/mux.go
@@ -1,22 +1,11 @@
 package web
 
 import (
-	"log"
 	"net/http"
 )
 
-type HttpContext struct {
-	issuer  string
-	keyData []byte
-	log     *log.Logger
-}
-
 func NewMux(issuer string, keyData []byte) http.Handler {
-	h := &HttpContext{
-		issuer:  issuer,
-		keyData: keyData,
-		log:     log.Default(),
-	}
+	h := NewHttpContext(issuer, keyData)
 	mux := http.NewServeMux()
 	mux.Handle("/", http.HandlerFunc(h.Default))
 	mux.Handle("/.well-known/jwks.json", http.HandlerFunc(h.WellKnown))
diff --git a/pkg/web/well_known.go b/pkg/web/well_known.go
index f5a2543..c6305f9 100644
--- a/pkg/web/well_known.go
+++ b/pkg/web/well_known.go
@@ -18,6 +18,21 @@ var (
 	tmpl = template.Must(template.New("").Parse(string(oidcConfig)))
 )
 
+type OpenIdConfiguration struct {
+	Issuer                           string   `json:"issuer"`
+	AuthorizationEndpoint            string   `json:"authorization_endpoint"`
+	TokenEndpoint                    string   `json:"token_endpoint"`
+	UserInfoEndpoint                 string   `json:"userinfo_endpoint"`
+	JwksUri                          string   `json:"jwks_uri"`
+	RevocationEndpoint               string   `json:"revocation_endpoint"`
+	ScopesSupported                  []string `json:"scopes_supported"`
+	ResponseTypesSupported           []string `json:"response_types_supported"`
+	ResponseModesSupported           []string `json:"response_modes_supported"`
+	SubjectTypesSupported            []string `json:"subject_types_supported"`
+	IdTokenSigningAlgValuesSupported []string `json:"id_token_signing_alg_values_supported"`
+	ClaimsSupported                  []string `json:"claims_supported"`
+}
+
 func (h *HttpContext) WellKnown(w http.ResponseWriter, r *http.Request) {
 	if r.URL.Path == "/.well-known/openid-configuration" {
 		w.Header().Set("Content-Type", "application/json")
diff --git a/pkg/web/well_known_test.go b/pkg/web/well_known_test.go
new file mode 100644
index 0000000..a0cba6d
--- /dev/null
+++ b/pkg/web/well_known_test.go
@@ -0,0 +1,55 @@
+package web
+
+import (
+	"encoding/json"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestWellKnown(t *testing.T) {
+	h := NewHttpContext("https://example.org", []byte{})
+
+	t.Run(".well-known/openid-configuration", func(t *testing.T) {
+		w := httptest.NewRecorder()
+		r := httptest.NewRequest("GET", "/.well-known/openid-configuration", nil)
+
+		h.WellKnown(w, r)
+
+		assert.Equal(t, w.Header().Get("Content-Type"), "application/json")
+
+		var c OpenIdConfiguration
+		json.NewDecoder(w.Body).Decode(&c)
+
+		assert.Equal(t, c.Issuer, "https://example.org")
+		assert.Equal(t, c.AuthorizationEndpoint, "https://example.org/authorize")
+		assert.Equal(t, c.TokenEndpoint, "https://example.org/token")
+		assert.Equal(t, c.UserInfoEndpoint, "https://example.org/userinfo")
+		assert.Equal(t, c.JwksUri, "https://example.org/.well-known/jwks.json")
+		assert.Equal(t, c.RevocationEndpoint, "https://example.org/revoke")
+		assert.EqualValues(t, c.ScopesSupported, []string{"openid"})
+		assert.EqualValues(t, c.ResponseTypesSupported, []string{
+			"code id_token token",
+			"code id_token",
+			"code token",
+			"code",
+			"id_token token",
+			"id_token",
+		})
+		assert.EqualValues(t, c.ResponseModesSupported, []string{
+			"query",
+			"fragment",
+			"form_post",
+		})
+		assert.EqualValues(t, c.SubjectTypesSupported, []string{"public"})
+		assert.EqualValues(t, c.IdTokenSigningAlgValuesSupported, []string{"RS256"})
+		assert.EqualValues(t, c.ClaimsSupported, []string{
+			"aud",
+			"exp",
+			"iat",
+			"iss",
+			"sub",
+		})
+	})
+}