The London Perl and Raku Workshop takes place on 26th Oct 2024. If your company depends on Perl, please consider sponsoring and/or attending.
use Mojolicious::Lite;
use Test::Mojo;
use Test::More;

my $t    = Test::Mojo->new;
my $port = $Mojolicious::VERSION >= 4.50
  ? $t->ua->server->url
  : $t->ua->app_url;

plugin 'OAuth2',
  test => {authorize_url => "/fake_auth", token_url => "/fake_token", key => 'fake_key', secret => 'fake_secret',};

get '/oauth' => sub {
  my $self = shift;
  $self->get_token(
    'test',
    scope => 'fakescope',
    sub {
      my ($c, $token, $tx) = @_;
      return $self->render(text => 'Token ' . $token) if $token;
      return $self->render(status => 500, text => 'oauth failed to get' . shift->req->url);
    },
  );
} => 'foo';

get 'fake_auth' => sub {
  my $self = shift;
  if ($self->param('client_id') && $self->param('redirect_uri') && $self->param('scope')) {
    my $return = Mojo::URL->new($self->param('redirect_uri'));
    $return->query->append(code => 'fake_code');
    $self->redirect_to($return);
  }
  else {
    $self->render(status => 404, text => 'REJECTED');
  }
};

post 'fake_token' => sub {
  my $self = shift;
  if ($self->param('client_secret') && $self->param('redirect_uri') && $self->param('code')) {
    my $qp = Mojo::Parameters->new(access_token => 'fake_token', lifetime => 3600);
    $self->render(text => $qp->to_string);
  }
  else {
    $self->render(status => 404, text => "FAIL OVERFLOW");
  }
};


$t->get_ok('/oauth')->status_is(302);    # ->content_like(qr/bar/);
my $location     = Mojo::URL->new($t->tx->res->headers->location);
my $callback_url = Mojo::URL->new($location->query->param('redirect_uri'));
is($location->query->param('client_id'), 'fake_key');
$t->get_ok($location)->status_is(302);
my $res = Mojo::URL->new($t->tx->res->headers->location);
is($res->path,                 $callback_url->path, 'Returns to the right place');
is($res->query->param('code'), 'fake_code',         'Includes fake code');
$t->get_ok($res)->status_is(200)->content_like(qr/fake_token/);

done_testing;