From b6f6819b7674eda968c0e53233b2a31e52eaebbc Mon Sep 17 00:00:00 2001
From: Kagami Sascha Rosylight <saschanaz@outlook.com>
Date: Mon, 17 Apr 2023 09:26:45 +0200
Subject: [PATCH] todo

---
 packages/backend/test/e2e/oauth.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/packages/backend/test/e2e/oauth.ts b/packages/backend/test/e2e/oauth.ts
index b24716e772..c0efb73135 100644
--- a/packages/backend/test/e2e/oauth.ts
+++ b/packages/backend/test/e2e/oauth.ts
@@ -328,6 +328,8 @@ describe('OAuth', () => {
 				code_verifier: code_verifier.slice(0, -10) + 'x'.repeat(10),
 			} as AuthorizationTokenConfigExtended));
 
+			// TODO: pattern 4: no code_verifier
+
 			// And now the code is invalidated by the previous failures
 			await assert.rejects(client.getToken({
 				code,
@@ -885,4 +887,6 @@ describe('OAuth', () => {
 	// TODO: Invalid decision endpoint parameters
 
 	// TODO: Unknown OAuth endpoint
+
+	// TODO: successful token exchange should invalidate the grant token (spec?)
 });