DEV: Test token_params

Author: davidtaylorhq

lib/omniauth_open_id_connect.rb

@@ -69,6 +69,15 @@ def authorize_params
  end
  end
 
+ def token_params
+ params = {}
+ options[:passthrough_token_options].each do |k|
+ val = session.delete("omniauth.param.#{k}")
+ params[k] = val unless [nil, ''].include?(val)
+ end
+ super.merge(params)
+ end
+
  uid { id_token_info['sub'] }
 
  info do
@@ -140,15 +149,6 @@ def callback_url
  full_host + script_name + callback_path
  end
 
- def token_params
- params = {}
- options[:passthrough_token_options].each do |k|
- val = session.delete("omniauth.param.#{k}")
- params[k] = val unless [nil, ''].include?(val)
- end
- super.merge(params)
- end
-
  def get_token_options
  { redirect_uri: callback_url,
  grant_type: 'authorization_code',

spec/lib/omniauth_open_id_connect_spec.rb

@@ -101,6 +101,15 @@
  end
  end
 
+ describe "token parameters" do
+ it "passes through parameters from authorize phase" do
+ expect(subject.authorize_params[:p]).to eq("someallowedvalue")
+ allow(subject).to receive(:request) { double("Request", params: {}) }
+ expect(subject.token_params[:p]).to eq("someallowedvalue")
+ end
+
+ end
+
  end
 
 end