fix: use correct "htm" in DPoP Proof via protectedResourceRequest

fixes #132
panva · Sep 3, 2024 · 3ce3be2 · 3ce3be2
1 parent eddc66f
commit 3ce3be2
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/src/index.ts b/src/index.ts
@@ -2133,7 +2133,7 @@ export async function protectedResourceRequest(
       headers,
       options.DPoP,
       url,
-      'GET',
+      method.toUpperCase(),
       getClockSkew({ [clockSkew]: options?.[clockSkew] }),
       accessToken,
     )

diff --git a/tap/end2end-device-code.ts b/tap/end2end-device-code.ts
@@ -96,9 +96,11 @@ export default (QUnit: QUnit) => {
         t.ok(access_token)
         t.equal(token_type, dpop ? 'dpop' : 'bearer')
 
+        const verb = ['GET', 'POST', 'PATCH'][Math.floor(Math.random() * 3)]
+
         await lib.protectedResourceRequest(
           access_token,
-          'GET',
+          verb,
           new URL('http://localhost:3001/resource'),
           undefined,
           undefined,