Remove fragment response type and repost view

lib/ResponseMode.js

@@ -21,12 +21,6 @@ module.exports = {
  */
  Query: 'query',
 
- /**
- * Authorization Response parameters are encoded in
- * the fragment added to the redirect_uri when redirecting back to the Client.
- */
- Fragment: 'fragment',
-
  /**
  * Authorization Response parameters are encoded as HTML form values
  * that are auto-submitted in the User Agent, and thus are transmitted via the HTTP POST method

middleware/auth.js

@@ -2,14 +2,10 @@ const express = require('express');
 const cb = require('cb');
 const createError = require('http-errors');
 const { get: getConfig } = require('../lib/config');
-const memoize = require('p-memoize');
-const fs = require('fs');
 const { get: getClient } = require('../lib/client');
 const requiresAuth = require('./requiresAuth');
 const { RequestContext, ResponseContext } = require('../lib/context');
 
-const getRepostView = memoize(() => fs.readFileSync(__dirname + '/../views/repost.html'));
-
 /**
 * Returns a router with two routes /login and /callback
 *
@@ -71,7 +67,6 @@ module.exports = function (params) {
  }
 
  let callbackMethod;
- let repost;
 
  switch (authorizeParams.response_mode) {
  case 'form_post':
@@ -80,18 +75,8 @@ module.exports = function (params) {
  case 'query':
  callbackMethod = 'get';
  break;
- case 'fragment':
- callbackMethod = 'post';
- repost = true;
- break;
  default:
- if (/token/.test(authorizeParams.response_type)) {
- callbackMethod = 'post';
- repost = true;
- }
- else {
- callbackMethod = 'get';
- }
+ callbackMethod = 'get';
  }
 
  router[callbackMethod](config.redirectUriPath, async (req, res, next) => {
@@ -128,13 +113,6 @@ module.exports = function (params) {
  }
  });
 
- if (repost) {
- router.get('/callback', async (req, res) => {
- res.set('Content-Type', 'text/html');
- res.send(getRepostView());
- });
- }
-
  if (config.required) {
  const requiresAuthMiddleware = requiresAuth();
  if (typeof config.required === 'function') {

test/auth.tests.js

@@ -1,6 +1,5 @@
 const assert = require('chai').assert;
 const url = require('url');
-const fs = require('fs');
 const request = require('request-promise-native').defaults({
  simple: false,
  resolveWithFullResponse: true
@@ -184,19 +183,9 @@ describe('auth', function() {
  });
 
  it('should contain the two callbacks route', function() {
- assert.ok(router.stack.some(filterRoute('POST', '/callback')));
  assert.ok(router.stack.some(filterRoute('GET', '/callback')));
  });
 
- it('should return an html on GET /callback', async function() {
- const cookieJar = request.jar();
- const res = await request.get('/callback', { cookieJar, baseUrl, followRedirect: false });
- assert.equal(res.statusCode, 200);
- assert.equal(res.headers['content-type'], 'text/html; charset=utf-8');
- const expectedBody = fs.readFileSync(`${__dirname}/../views/repost.html`, 'utf-8');
- assert.equal(res.body, expectedBody);
- });
-
  });
  });
 });