#14 fix: parse OAuth token form requests

Merged through PR #14; the PR retains the reviewed commit history.

Author: hexf00

apps/workspace/server/src/modules/identity/oauth-authorization-router.ts

@@ -1,4 +1,4 @@
-import { json, Router } from "express";
+import { json, Router, urlencoded } from "express"
 import { ApplicationError } from "../../middleware/errors.js";
 import type { IdentityModule } from "./identity.service.js";
 import {
@@ -22,6 +22,7 @@ export function createOAuthAuthorizationRouter(options: {
 }): Router {
   const router = Router();
   router.use(json({ limit: "1mb" }));
+  router.use(urlencoded({ extended: false, limit: "1mb" }));
   const clients = new Map<string, OAuthClient>();
   for (const client of options.oauthClients?.clients ?? []) {
     clients.set(client.clientId, client);

apps/workspace/test/integration/oauth-authorization.test.ts

@@ -109,15 +109,15 @@ describe("OAuth authorization", () => {
 
     const token = await fetch(`${origin}/api/auth/token`, {
       method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({
+      headers: { "content-type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
         grant_type: "authorization_code",
-        code,
+        code: code ?? "",
         client_id: CLIENT_ID,
         client_secret: CLIENT_SECRET,
         redirect_uri: CALLBACK_URL,
         code_verifier: CODE_VERIFIER,
-      }),
+      }).toString(),
     });
     expect(token.status).toBe(200);
     const body = (await token.json()) as {