Auth

Requirement: POST /authorize REQ_INTEROP_086

status: verified tags: Auth is verified by: TEST_AuthHandlersAuthorizeTest_AuthorizeErrorBodyFollowsOAuth2Format, TEST_AuthHandlersAuthorizeTest_ReturnsBadRequestForEmptyClientId, TEST_AuthHandlersAuthorizeTest_ReturnsBadRequestForEmptyClientSecret, TEST_AuthHandlersAuthorizeTest_ReturnsBadRequestForMissingClientId, TEST_AuthHandlersAuthorizeTest_ReturnsBadRequestForMissingClientSecret, TEST_AuthHandlersAuthorizeTest_ReturnsBadRequestForWrongGrantType, TEST_AuthHandlersDisabledTest_AuthorizeErrorBodyContainsErrorCode, TEST_AuthHandlersDisabledTest_AuthorizeReturns404WhenAuthDisabled, TEST_AuthHandlersDisabledTest_RevokeReturns404WhenAuthDisabled, TEST_AuthHandlersRevokeTest_ReturnsBadRequestForInvalidJson, TEST_AuthHandlersRevokeTest_ReturnsBadRequestForMissingTokenField, TEST_AuthHandlersRevokeTest_ReturnsBadRequestForNonStringToken, TEST_AuthHandlersWithManagerTest_AuthorizeReturnsTokensForValidCredentials, TEST_AuthHandlersWithManagerTest_AuthorizeReturnsUnauthorizedForInvalidCredentials, TEST_AuthHandlersWithManagerTest_RevokeRevokesRefreshTokenForSubsequentTokenRequest, TEST_AuthManagerTest_AuthenticateValidCredentials, TEST_AuthManagerTest_AuthorizeViewerCanRead, TEST_AuthMiddlewareTest_AuthEndpointsNeverRequireAuth, TEST_AuthMiddlewareTest_DisabledMiddlewareAllowsAll, TEST_AuthMiddlewareTest_ExtractBearerToken_CaseInsensitive, TEST_AuthMiddlewareTest_ExtractBearerToken_EmptyHeader, TEST_AuthMiddlewareTest_ExtractBearerToken_EmptyToken, TEST_AuthMiddlewareTest_ExtractBearerToken_InvalidPrefix, TEST_AuthMiddlewareTest_ExtractBearerToken_ValidToken, TEST_AuthMiddlewareTest_ProcessGetRequestWithoutAuth, TEST_AuthMiddlewareTest_ProcessWriteRequestWithInsufficientPermissions, TEST_AuthMiddlewareTest_ProcessWriteRequestWithInvalidToken, TEST_AuthMiddlewareTest_ProcessWriteRequestWithValidToken, TEST_AuthMiddlewareTest_ProcessWriteRequestWithoutAuth, TEST_AuthRequirementPolicyTest_AllAuthPolicyAlwaysRequiresAuth, TEST_AuthRequirementPolicyTest_ConfigurablePolicyExactMatch, TEST_AuthRequirementPolicyTest_ConfigurablePolicyLongestMatchWins, TEST_AuthRequirementPolicyTest_ConfigurablePolicyMultipleWildcards, TEST_AuthRequirementPolicyTest_ConfigurablePolicyUnknownPathsRequireAuth, TEST_AuthRequirementPolicyTest_ConfigurablePolicyWildcardMatch, TEST_AuthRequirementPolicyTest_FactoryCreatesAllAuthFromConfig, TEST_AuthRequirementPolicyTest_FactoryCreatesNoAuthPolicy, TEST_AuthRequirementPolicyTest_FactoryCreatesWriteOnlyFromConfig, TEST_AuthRequirementPolicyTest_NoAuthPolicyNeverRequiresAuth, TEST_AuthRequirementPolicyTest_PolicyDescriptions, TEST_AuthRequirementPolicyTest_WriteOnlyPolicyForGetRequests, TEST_AuthRequirementPolicyTest_WriteOnlyPolicyForWriteRequests, TEST_AuthorizeRequestTest_ParseRequestFormUrlEncoded, TEST_AuthorizeRequestTest_ParseRequestInvalidContentType, TEST_AuthorizeRequestTest_ParseRequestInvalidJson, TEST_AuthorizeRequestTest_ParseRequestJson, TEST_AuthorizeRequestTest_ParseRequestJsonWithCharset, TEST_TestAuthenticationIntegration_test_03_authenticate_valid_credentials, TEST_TestAuthenticationIntegration_test_06_authenticate_form_urlencoded

The endpoint shall perform an authorization flow and issue authorization information based on client credentials.

Requirement: POST /token REQ_INTEROP_087

status: verified tags: Auth is verified by: TEST_AuthHandlersDisabledTest_TokenReturns404WhenAuthDisabled, TEST_AuthHandlersTokenTest_ReturnsBadRequestForEmptyRefreshToken, TEST_AuthHandlersTokenTest_ReturnsBadRequestForMissingRefreshToken, TEST_AuthHandlersTokenTest_ReturnsBadRequestForWrongGrantType, TEST_AuthHandlersWithManagerTest_TokenReturnsNewAccessTokenForValidRefreshToken, TEST_AuthHandlersWithManagerTest_TokenReturnsUnauthorizedForInvalidRefreshToken, TEST_AuthManagerRS256Test_RS256WithMissingPrivateKeyThrows, TEST_AuthManagerTest_DisabledClientTokenBecomesInvalid, TEST_AuthManagerTest_RefreshAccessToken, TEST_AuthManagerTest_RefreshRevocationPropagatestoAccessToken, TEST_AuthManagerTest_RefreshWithAccessTokenFails, TEST_AuthManagerTest_ValidateTokenWithCorrectType, TEST_AuthManagerTest_ValidateTokenWithWrongTypeRejectsToken, TEST_AuthManagerTest_ValidateValidToken, TEST_AuthMiddlewareTest_ProcessWriteRequestWithValidToken, TEST_TestAuthenticationIntegration_test_07_refresh_token, TEST_TokenTypeTest_TokenTypeToString

The endpoint shall issue or refresh an access token that authorizes subsequent SOVD API calls.