openiddict-core/test/OpenIddict.Server.AspNetCore.IntegrationTests/OpenIddictServerAspNetCoreIntegrationTests.Session.cs

/*
 * Licensed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0)
 * See https://github.com/openiddict/openiddict-core for more information concerning
 * the license and the contributors participating to this project.
 */

using Microsoft.Extensions.DependencyInjection;
using OpenIddict.Server.IntegrationTests;
using Xunit;

namespace OpenIddict.Server.AspNetCore.IntegrationTests;

public partial class OpenIddictServerAspNetCoreIntegrationTests : OpenIddictServerIntegrationTests
{
    [Fact(Skip = "The handler responsible for rejecting such requests has not been ported yet.")]
    public async Task ExtractLogoutRequest_RequestIdParameterIsRejectedWhenRequestCachingIsDisabled()
    {
        // Arrange
        await using var server = await CreateServerAsync(options => options.EnableDegradedMode());
        await using var client = await server.CreateClientAsync();

        // Act
        var response = await client.PostAsync("/connect/logout", new OpenIddictRequest
        {
            RequestId = "EFAF3596-F868-497F-96BB-AA2AD1F8B7E7"
        });

        // Assert
        Assert.Equal(Errors.InvalidRequest, response.Error);
        Assert.Equal(SR.FormatID2028(Parameters.RequestId), response.ErrorDescription);
    }

    [Fact]
    public async Task ExtractLogoutRequest_InvalidRequestIdParameterIsRejected()
    {
        // Arrange
        await using var server = await CreateServerAsync(options =>
        {
            options.Services.AddDistributedMemoryCache();

            options.UseAspNetCore()
                   .EnableLogoutRequestCaching();
        });

        await using var client = await server.CreateClientAsync();

        // Act
        var response = await client.PostAsync("/connect/logout", new OpenIddictRequest
        {
            RequestId = "EFAF3596-F868-497F-96BB-AA2AD1F8B7E7"
        });

        // Assert
        Assert.Equal(Errors.InvalidRequest, response.Error);
        Assert.Equal(SR.FormatID2052(Parameters.RequestId), response.ErrorDescription);
    }
}