fix: allow POST method in create_authorization_response (#65)

* fix: allow `POST` method in `create_authorization_response`

fixes #64

* bump: 1.4.1

Author: aliev

.pre-commit-config.yaml

@@ -5,12 +5,12 @@ fail_fast: true
 
 repos:
   - repo: https://github.com/psf/black
-    rev: 21.6b0
+    rev: 22.3.0
     hooks:
       - id: black
 
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.0.1
+    rev: v4.2.0
     hooks:
       - id: trailing-whitespace
         exclude: ^(setup\.cfg)
@@ -20,12 +20,12 @@ repos:
       - id: detect-private-key
 
   - repo: https://github.com/pre-commit/mirrors-mypy
-    rev: v0.910
+    rev: v0.950
     hooks:
       - id: mypy
         exclude: ^(docs/|setup\.py|tests/)
 
   - repo: https://github.com/pycqa/flake8
-    rev: 3.9.2
+    rev: 4.0.1
     hooks:
     -   id: flake8

aioauth/__version__.py

@@ -1,7 +1,7 @@
 __title__ = "aioauth"
 __description__ = "Asynchronous OAuth 2.0 framework for Python 3."
 __url__ = "https://github.com/aliev/aioauth"
-__version__ = "1.4.0"
+__version__ = "1.4.1"
 __author__ = "Ali Aliyev"
 __author_email__ = "[email protected]"
 __license__ = "The MIT License (MIT)"

aioauth/server.py

@@ -324,7 +324,7 @@ async def authorize(request: fastapi.Request) -> fastapi.Response:
         Returns:
             response: An :py:class:`aioauth.responses.Response` object.
         """
-        self.validate_request(request, [RequestMethod.GET])
+        self.validate_request(request, [RequestMethod.GET, RequestMethod.POST])
 
         response_type_list = enforce_list(request.query.response_type)
         response_type_classes = set()

setup.cfg

@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 1.4.0
+current_version = 1.4.1
 commit = True
 tag = True
 
@@ -12,7 +12,7 @@ addopts = -s --strict-markers -vv --cache-clear --maxfail=1 --cov=aioauth --cov-
 
 [coverage:run]
 branch = True
-omit = 
+omit =
 	site-packages
 	aioauth/__version__.py
 

tests/test_request_validator.py

@@ -39,7 +39,7 @@ async def test_insecure_transport_error(server: AuthorizationServer):
 async def test_allowed_methods(server: AuthorizationServer):
     request_url = "https://localhost"
 
-    request = Request(url=request_url, method=RequestMethod.POST)
+    request = Request(url=request_url, method="DELETE")  # type: ignore
 
     response = await server.create_authorization_response(request)
     assert response.status_code == HTTPStatus.METHOD_NOT_ALLOWED