Skip to content

Commit 647aaed

Browse files
committed
fix: renew token test should fail nonce check after exchange
1 parent db2930a commit 647aaed

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

tests/Auth0Test.php

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -294,7 +294,7 @@ public function testThatRenewTokensSucceeds()
294294

295295
$mock = new MockHandler( [
296296
// Code exchange response.
297-
new Response( 200, self::$headers, '{"access_token":"1.2.3","refresh_token":"2.3.4"}' ),
297+
new Response( 200, self::$headers, '{"access_token":"1.2.3","refresh_token":"2.3.4","id_token":"'.$id_token.'"}' ),
298298
// Refresh token response.
299299
new Response( 200, self::$headers, '{"access_token":"__test_access_token__","id_token":"'.$id_token.'"}' ),
300300
] );
@@ -315,6 +315,10 @@ public function testThatRenewTokensSucceeds()
315315
$_SESSION['auth0__state'] = '__test_state__';
316316

317317
$this->assertTrue( $auth0->exchange() );
318+
319+
$this->assertArrayNotHasKey('auth0__nonce', $_SESSION);
320+
$this->assertArrayNotHasKey('auth0__state', $_SESSION);
321+
318322
$auth0->renewTokens(['scope' => 'openid']);
319323

320324
$this->assertEquals( '__test_access_token__', $auth0->getAccessToken() );

0 commit comments

Comments
 (0)