kevin/baron-sso
1
0
Fork 0
forked from baron/baron-sso
Code Pull Requests Activity

Hydra Client Patch 규격 수정 및 로그인 거부 기능 추가

Browse Source
This commit is contained in:
김용연
2026-02-04 15:48:44 +09:00
parent 41c1672afc
commit 9f7c6bfd27
1 changed files with 53 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

57
backend/internal/service/hydra_admin_service.go
View File

@@ -139,9 +139,12 @@ func (s *HydraAdminService) GetClient(ctx context.Context, clientID string) (*do
}
func (s *HydraAdminService) PatchClientStatus(ctx context.Context, clientID, status string) (*domain.HydraClient, error) {
payload := map[string]interface{}{
"metadata": map[string]interface{}{
"status": status,
// JSON Patch format
payload := []map[string]interface{}{
{
"op": "replace",
"path": "/metadata/status",
"value": status,
},
}
body, _ := json.Marshal(payload)
@@ -151,7 +154,7 @@ func (s *HydraAdminService) PatchClientStatus(ctx context.Context, clientID, sta
if err != nil {
return nil, err
}
req.Header.Set("Content-Type", "application/merge-patch+json")
req.Header.Set("Content-Type", "application/json-patch+json")
resp, err := s.httpClient().Do(req)
if err != nil {
@@ -382,6 +385,10 @@ type RejectConsentRequestResponse struct {
RedirectTo string `json:"redirectTo"`
}
type RejectLoginRequestResponse struct {
RedirectTo string `json:"redirectTo"`
}
func (s *HydraAdminService) GetConsentRequest(ctx context.Context, challenge string) (*HydraConsentRequest, error) {
params := map[string]string{
"consent_challenge": challenge,
@@ -457,6 +464,48 @@ func (s *HydraAdminService) RejectConsentRequest(ctx context.Context, challenge
return &RejectConsentRequestResponse{RedirectTo: hydraResp.RedirectTo}, nil
}
func (s *HydraAdminService) RejectLoginRequest(ctx context.Context, challenge, error, errorDescription string) (*RejectLoginRequestResponse, error) {
params := map[string]string{
"login_challenge": challenge,
}
endpoint, err := s.buildURLWithParams("/oauth2/auth/requests/login/reject", params)
if err != nil {
return nil, err
}
payload := map[string]interface{}{
"error": error,
"error_description": errorDescription,
}
body, _ := json.Marshal(payload)
req, err := http.NewRequestWithContext(ctx, "PUT", endpoint, bytes.NewReader(body))
if err != nil {
return nil, fmt.Errorf("hydra admin: create request for reject login failed: %w", err)
}
req.Header.Set("Content-Type", "application/json")
resp, err := s.httpClient().Do(req)
if err != nil {
return nil, fmt.Errorf("hydra admin: reject login request failed: %w", err)
}
defer resp.Body.Close()
respBody, _ := io.ReadAll(resp.Body)
if resp.StatusCode != http.StatusOK {
return nil, fmt.Errorf("hydra admin: reject login failed status=%d body=%s", resp.StatusCode, string(respBody))
}
var hydraResp struct {
RedirectTo string `json:"redirect_to"`
}
if err := json.Unmarshal(respBody, &hydraResp); err != nil {
return nil, fmt.Errorf("hydra admin: decode reject login response failed: %w", err)
}
return &RejectLoginRequestResponse{RedirectTo: hydraResp.RedirectTo}, nil
}
func (s *HydraAdminService) GetLoginRequest(ctx context.Context, challenge string) (*HydraLoginRequest, error) {
params := map[string]string{
"login_challenge": challenge,