wt committed
commit
cf25e28c28
156 files changed
+38669
No files matched your search
@@ -0,0 +1,502 @@
|
||||
{
|
||||
"php": "8.4.27",
|
||||
"framework": "Laravel13.29.0/Passport13.7.6",
|
||||
"request_format": "application/x-www-form-urlencoded",
|
||||
"environment": "fresh disposable SQLite migrations and client-credentials fixture",
|
||||
"results": [
|
||||
{
|
||||
"case": "missing-grant-type",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "59",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "unsupported_grant_type",
|
||||
"error_description": "The authorization grant type is not supported by the authorization server.",
|
||||
"hint": "Check that all required parameters have been provided"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "unsupported-grant",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "58",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "unsupported_grant_type",
|
||||
"error_description": "The authorization grant type is not supported by the authorization server.",
|
||||
"hint": "Check that all required parameters have been provided"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "client-credentials-missing-client-id",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "57",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_request",
|
||||
"error_description": "The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.",
|
||||
"hint": "Check the `client_id` parameter"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "unknown-client",
|
||||
"status": 401,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "56",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_client",
|
||||
"error_description": "Client authentication failed"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "wrong-client-secret",
|
||||
"status": 401,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "55",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_client",
|
||||
"error_description": "Client authentication failed"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "unknown-scope",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "54",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_scope",
|
||||
"error_description": "The requested scope is invalid, unknown, or malformed",
|
||||
"hint": "Check the `__compat_unknown_scope__` scope"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "valid-control",
|
||||
"status": 200,
|
||||
"headers": {
|
||||
"Content-Type": "application/json; charset=UTF-8",
|
||||
"Cache-Control": "no-store, private",
|
||||
"Pragma": "no-cache",
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "53",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"token_type": "Bearer",
|
||||
"expires_in": 31536000,
|
||||
"access_token_present": true,
|
||||
"refresh_token_present": false
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "confidential-missing-secret",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "52",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_request",
|
||||
"error_description": "The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.",
|
||||
"hint": "Check the `client_secret` parameter"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "unauthorized-grant-valid-client",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "51",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "unauthorized_client",
|
||||
"error_description": "The authenticated client is not authorized to use this authorization grant type."
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "auth-code-missing-code",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "50",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_request",
|
||||
"error_description": "The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.",
|
||||
"hint": "Check the `code` parameter"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "refresh-missing-token",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "49",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_request",
|
||||
"error_description": "The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.",
|
||||
"hint": "Check the `refresh_token` parameter"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "auth-code-invalid-ciphertext",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "48",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_grant",
|
||||
"error_description": "The provided authorization grant (e.g., authorization code, resource owner credentials) or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client.",
|
||||
"hint": "Cannot validate the provided authorization code"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "refresh-invalid-ciphertext",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "47",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_grant",
|
||||
"error_description": "The refresh token is invalid.",
|
||||
"hint": "Cannot decrypt the refresh token"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "auth-code-malformed-payload",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "46",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_request",
|
||||
"error_description": "The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.",
|
||||
"hint": "Authorization code malformed"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "auth-code-expired",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "45",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_grant",
|
||||
"error_description": "The provided authorization grant (e.g., authorization code, resource owner credentials) or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client.",
|
||||
"hint": "Authorization code has expired"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "auth-code-revoked",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "44",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_grant",
|
||||
"error_description": "The provided authorization grant (e.g., authorization code, resource owner credentials) or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client.",
|
||||
"hint": "Authorization code has been revoked"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "auth-code-wrong-client",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "43",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_request",
|
||||
"error_description": "The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.",
|
||||
"hint": "Authorization code was not issued to this client"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "auth-code-missing-redirect",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "42",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_request",
|
||||
"error_description": "The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.",
|
||||
"hint": "Check the `redirect_uri` parameter"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "auth-code-wrong-redirect",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "41",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_request",
|
||||
"error_description": "The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.",
|
||||
"hint": "Invalid redirect URI"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "pkce-missing-verifier",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "40",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_request",
|
||||
"error_description": "The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.",
|
||||
"hint": "Check the `code_verifier` parameter"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "pkce-invalid-syntax",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "39",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_request",
|
||||
"error_description": "The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.",
|
||||
"hint": "Code Verifier must follow the specifications of RFC-7636."
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "pkce-mismatch",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "38",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_grant",
|
||||
"error_description": "The provided authorization grant (e.g., authorization code, resource owner credentials) or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client.",
|
||||
"hint": "Failed to verify `code_verifier`."
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "pkce-downgrade",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "37",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_request",
|
||||
"error_description": "The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.",
|
||||
"hint": "code_verifier received when no code_challenge is present"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "wrong-basic-secret",
|
||||
"status": 401,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": "Basic realm=\"OAuth\"",
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "36",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "invalid_client",
|
||||
"error_description": "Client authentication failed"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "json-unsupported-grant",
|
||||
"status": 400,
|
||||
"headers": {
|
||||
"Content-Type": "application/json",
|
||||
"Cache-Control": "no-cache, private",
|
||||
"Pragma": null,
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "35",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"error": "unsupported_grant_type",
|
||||
"error_description": "The authorization grant type is not supported by the authorization server.",
|
||||
"hint": "Check that all required parameters have been provided"
|
||||
}
|
||||
},
|
||||
{
|
||||
"case": "json-valid-control",
|
||||
"status": 200,
|
||||
"headers": {
|
||||
"Content-Type": "application/json; charset=UTF-8",
|
||||
"Cache-Control": "no-store, private",
|
||||
"Pragma": "no-cache",
|
||||
"WWW-Authenticate": null,
|
||||
"Access-Control-Allow-Origin": null,
|
||||
"X-RateLimit-Limit": "60",
|
||||
"X-RateLimit-Remaining": "34",
|
||||
"Retry-After": null
|
||||
},
|
||||
"body": {
|
||||
"token_type": "Bearer",
|
||||
"expires_in": 31536000,
|
||||
"access_token_present": true,
|
||||
"refresh_token_present": false
|
||||
}
|
||||
}
|
||||
],
|
||||
"upstream_commit": "3516c776a1fcbd83d234efc007e3a49807d6ed91",
|
||||
"composer_lock_sha256": "b1376d21c517d700bc48b196e9dc2b30257caf25774e315ff9d1bf8a2411241a"
|
||||
}
|
||||
Reference in new issue
Block a user