More resilient in handling response_types.

Prepare for general automatic registration.
IdentityPython · May 21, 2024 · 142fb8b · 142fb8b
1 parent ac976ce
commit 142fb8b
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/src/idpyoidc/server/client_authn.py b/src/idpyoidc/server/client_authn.py
@@ -529,7 +529,12 @@ def verify_client(
             try:
                 _cinfo = _cdb[client_id]
             except KeyError:
-                raise UnknownClient("Unknown Client ID")
+                _auto_reg = getattr(endpoint, "automatic_registration", None)
+                if _auto_reg:
+                    _cinfo = {"client_id": client_id}
+                    _auto_reg.set(client_id, _cinfo)
+                else:
+                    raise UnknownClient("Unknown Client ID")
 
         if not _cinfo:
             raise UnknownClient("Unknown Client ID")

diff --git a/src/idpyoidc/server/oauth2/authorization.py b/src/idpyoidc/server/oauth2/authorization.py
@@ -866,7 +866,12 @@ def create_authn_response(self, request: Union[dict, Message], sid: str) -> dict
                 list(set(scope + resource_scopes)), _sinfo["client_id"]
             )
 
-            rtype = set(request["response_type"][:])
+            if isinstance(request["response_type"], list):
+                rtype = set(request["response_type"][:])
+            else: # assume it's a string
+                rtype = set()
+                rtype.add(request["response_type"])
+
             handled_response_type = []
 
             fragment_enc = True