perlsky is a Perl 5 implementation of an AT Protocol Personal Data Server.
Cover sanitized OAuth DPoP failures
+9
+9
t/oauth.t
+9
t/oauth.t
···
150
150
->json_is('/did' => $did)
151
151
->json_is('/handle' => 'alice.localhost');
152
152
153
+
$t->get_ok('/xrpc/com.atproto.server.getSession' => {
154
+
Authorization => "DPoP $access_token",
155
+
DPoP => _dpop_jwt($client_jwk, $client_private, 'GET', $session_url . '?mismatch=1', ath => $access_token),
156
+
})->status_is(401)
157
+
->json_is('/error' => 'InvalidToken')
158
+
->json_like('/message' => qr/DPoP proof htu did not match request/)
159
+
->content_unlike(qr/\Q$root\E/)
160
+
->content_unlike(qr/line \d+/);
161
+
153
162
$t->get_ok('/xrpc/com.atproto.server.getAccountInviteCodes' => {
154
163
Authorization => "DPoP $access_token",
155
164
DPoP => _dpop_jwt($client_jwk, $client_private, 'GET', $config->{base_url} . '/xrpc/com.atproto.server.getAccountInviteCodes', ath => $access_token),