diff --git a/e2e/oidc-app/src/ping-am/index.html b/e2e/oidc-app/src/ping-am/index.html index adeaf8d..3c2b90e 100644 --- a/e2e/oidc-app/src/ping-am/index.html +++ b/e2e/oidc-app/src/ping-am/index.html @@ -23,6 +23,7 @@ + Start Over diff --git a/e2e/oidc-app/src/utils/oidc-app.ts b/e2e/oidc-app/src/utils/oidc-app.ts index 3c59584..07e2d4d 100644 --- a/e2e/oidc-app/src/utils/oidc-app.ts +++ b/e2e/oidc-app/src/utils/oidc-app.ts @@ -230,6 +230,17 @@ export async function oidcApp({ appEl?.appendChild(el); }); + document + .getElementById('session-check-id-token-subject-btn') + ?.addEventListener('click', async () => { + const options: SessionCheckOptions = { responseType: 'id_token', subject: 'expected-user' }; + const result = await oidcClient.session?.check(options); + const appEl = document.getElementById('app'); + const el = document.createElement('div'); + el.innerHTML = `

Session Check (id_token) with subject:

${JSON.stringify(result, null, 2)}

`; + appEl?.appendChild(el); + }); + if (code && state) { const response = await oidcClient.token?.exchange(code, state); if (response) { diff --git a/e2e/oidc-suites/src/session.spec.ts b/e2e/oidc-suites/src/session.spec.ts index a6f4a2a..1ba8b43 100644 --- a/e2e/oidc-suites/src/session.spec.ts +++ b/e2e/oidc-suites/src/session.spec.ts @@ -89,7 +89,7 @@ test.describe('session.check() tests', () => { expect(resultText).toContain('"error": "login_required"'); }); - test('session check (none) fails with login_required when no session exists', async ({ + test('session check (none) fails with interaction_required when no session exists', async ({ page, }) => { const { navigate } = asyncEvents(page); @@ -99,7 +99,7 @@ test.describe('session.check() tests', () => { await page.getByRole('button', { name: 'Session Check (none)', exact: true }).click(); await expect(page.locator('#session-check-result')).not.toBeEmpty(); const resultText = await page.locator('#session-check-result').textContent(); - expect(resultText).toContain('"error": "login_required"'); + expect(resultText).toContain('"error": "interaction_required"'); }); test('session check (id_token) succeeds with valid JWT in hash', async ({ page }) => { @@ -128,7 +128,7 @@ test.describe('session.check() tests', () => { } }); - await page.getByRole('button', { name: 'Session Check (id_token)' }).click(); + await page.getByRole('button', { name: 'Session Check (id_token)', exact: true }).click(); await expect(page.locator('#session-check-id-token-result')).not.toBeEmpty(); const resultText = await page.locator('#session-check-id-token-result').textContent(); expect(resultText).toContain('"claims"'); @@ -158,7 +158,7 @@ test.describe('session.check() tests', () => { } }); - await page.getByRole('button', { name: 'Session Check (id_token)' }).click(); + await page.getByRole('button', { name: 'Session Check (id_token)', exact: true }).click(); await expect(page.locator('#session-check-id-token-result')).not.toBeEmpty(); const resultText = await page.locator('#session-check-id-token-result').textContent(); expect(resultText).toContain('"error": "login_required"'); @@ -219,7 +219,7 @@ test.describe('session.check() tests', () => { } }); - await page.getByRole('button', { name: 'Session Check (id_token)' }).click(); + await page.getByRole('button', { name: 'Session Check (id_token)', exact: true }).click(); await expect(page.locator('#session-check-id-token-result')).not.toBeEmpty(); const resultText = await page.locator('#session-check-id-token-result').textContent(); expect(resultText).toContain('"error": "nonce_mismatch"');