Remove strict validation on response_modes_supported member of OAuthMetadata (#1243)

2025-08-07 12:39:35 -05:00 · 2025-08-07 12:39:35 -05:00 · ef4e167c1a
commit ef4e167c1a
parent e68e513b42
1 changed files with 23 additions and 1 deletions
--- a/tests/shared/test_auth.py
+++ b/tests/shared/test_auth.py
@ -37,3 +37,25 @@ class TestOAuthMetadata:
                "userinfo_endpoint": "https://example.com/oauth2/userInfo",
            }
        )
+
+    def test_oauth_with_jarm(self):
+        """Should not throw when parsing OAuth metadata that includes JARM response modes."""
+        OAuthMetadata.model_validate(
+            {
+                "issuer": "https://example.com",
+                "authorization_endpoint": "https://example.com/oauth2/authorize",
+                "token_endpoint": "https://example.com/oauth2/token",
+                "scopes_supported": ["read", "write"],
+                "response_types_supported": ["code", "token"],
+                "response_modes_supported": [
+                    "query",
+                    "fragment",
+                    "form_post",
+                    "query.jwt",
+                    "fragment.jwt",
+                    "form_post.jwt",
+                    "jwt",
+                ],
+                "token_endpoint_auth_methods_supported": ["client_secret_basic", "client_secret_post"],
+            }
+        )