shrink token.test.ts

Author: ochafik

src/client/auth.ts

@@ -93,7 +93,7 @@ export async function auth(
  { serverUrl,
  authorizationCode,
  scope,
- resourceMetadataUrl,
+ resourceMetadataUrl
  }: {
  serverUrl: string | URL;
  authorizationCode?: string;

src/server/auth/handlers/token.test.ts

@@ -307,74 +307,6 @@ describe('Token Handler', () => {
  );
  });
 
- it('rejects invalid resource parameter (non-URL)', async () => {
- const response = await supertest(app)
- .post('/token')
- .type('form')
- .send({
- client_id: 'valid-client',
- client_secret: 'valid-secret',
- grant_type: 'authorization_code',
- code: 'valid_code',
- code_verifier: 'valid_verifier',
- resource: 'not-a-url'
- });
-
- expect(response.status).toBe(400);
- expect(response.body.error).toBe('invalid_request');
- expect(response.body.error_description).toContain('resource');
- });
-
- it('handles authorization code exchange without resource parameter', async () => {
- const mockExchangeCode = jest.spyOn(mockProvider, 'exchangeAuthorizationCode');
- 
- const response = await supertest(app)
- .post('/token')
- .type('form')
- .send({
- client_id: 'valid-client',
- client_secret: 'valid-secret',
- grant_type: 'authorization_code',
- code: 'valid_code',
- code_verifier: 'valid_verifier'
- });
-
- expect(response.status).toBe(200);
- expect(mockExchangeCode).toHaveBeenCalledWith(
- validClient,
- 'valid_code',
- undefined, // code_verifier is undefined after PKCE validation
- undefined, // redirect_uri
- undefined // resource parameter
- );
- });
-
- it('passes resource with redirect_uri', async () => {
- const mockExchangeCode = jest.spyOn(mockProvider, 'exchangeAuthorizationCode');
- 
- const response = await supertest(app)
- .post('/token')
- .type('form')
- .send({
- client_id: 'valid-client',
- client_secret: 'valid-secret',
- grant_type: 'authorization_code',
- code: 'valid_code',
- code_verifier: 'valid_verifier',
- redirect_uri: 'https://example.com/callback',
- resource: 'https://api.example.com/resource'
- });
-
- expect(response.status).toBe(200);
- expect(mockExchangeCode).toHaveBeenCalledWith(
- validClient,
- 'valid_code',
- undefined, // code_verifier is undefined after PKCE validation
- 'https://example.com/callback', // redirect_uri
- new URL('https://api.example.com/resource') // resource parameter
- );
- });
-
  it('passes through code verifier when using proxy provider', async () => {
  const originalFetch = global.fetch;