Support OAuth 2.0 client credentials flow

.github/workflows/test.yaml

@@ -18,7 +18,10 @@ jobs:
           go-version: ${{ env.GO_VERSION }}
       - name: Run Go unit tests
         run: |
+          docker compose up -d hydra hydra-migrate
+          sleep 5
           go test -v -coverpkg=./... -race -timeout 3m -coverprofile=coverage.out.tmp ./...
+          docker compose down -v
           cat coverage.out.tmp | grep -v "main.go" > coverage.out
       - name: Run integration tests
         run: |

compose.yaml

@@ -12,4 +12,47 @@ services:
       - local.hasura.dev=host-gateway
     environment:
       OTEL_EXPORTER_OTLP_ENDPOINT: http://local.hasura.dev:4317
+      HYDRA_PUBLIC_SERVER_URL: http://hydra:4444
+      HYDRA_ADMIN_SERVER_URL: http://hydra:4445
       HASURA_LOG_LEVEL: debug
+
+  hydra:
+    image: oryd/hydra:v2.2.0
+    ports:
+      - "4444:4444" # Public port
+      - "4445:4445" # Admin port
+      - "5555:5555" # Port for hydra token user
+    command: serve -c /etc/config/hydra/hydra.yml all --dev
+    volumes:
+      - type: volume
+        source: hydra-sqlite
+        target: /var/lib/sqlite
+        read_only: false
+      - type: bind
+        source: ./tests/hydra.yml
+        target: /etc/config/hydra/hydra.yml
+    environment:
+      - DSN=sqlite:///var/lib/sqlite/db.sqlite?_fk=true
+    restart: unless-stopped
+    depends_on:
+      hydra-migrate:
+        required: true
+        condition: service_completed_successfully
+
+  hydra-migrate:
+    image: oryd/hydra:v2.2.0
+    environment:
+      - DSN=sqlite:///var/lib/sqlite/db.sqlite?_fk=true
+    command: migrate -c /etc/config/hydra/hydra.yml sql -e --yes
+    volumes:
+      - type: volume
+        source: hydra-sqlite
+        target: /var/lib/sqlite
+        read_only: false
+      - type: bind
+        source: ./tests/hydra.yml
+        target: /etc/config/hydra/hydra.yml
+    restart: on-failure
+
+volumes:
+  hydra-sqlite:

connector/connector.go

@@ -4,6 +4,7 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
+	"net/http"
 
 	"github.com/hasura/ndc-http/connector/internal"
 	"github.com/hasura/ndc-http/ndc-http-schema/configuration"
@@ -19,7 +20,8 @@ type HTTPConnector struct {
 	capabilities *schema.RawCapabilitiesResponse
 	rawSchema    *schema.RawSchemaResponse
 	schema       *rest.NDCHttpSchema
-	client       internal.Doer
+	httpClient   *http.Client
+	upstreams    *internal.UpstreamManager
 }
 
 // NewHTTPConnector creates a HTTP connector instance
@@ -29,7 +31,7 @@ func NewHTTPConnector(opts ...Option) *HTTPConnector {
 	}
 
 	return &HTTPConnector{
-		client: defaultOptions.client,
+		httpClient: defaultOptions.client,
 	}
 }
 
@@ -76,11 +78,11 @@ func (c *HTTPConnector) ParseConfiguration(ctx context.Context, configurationDir
 		}
 	}
 
-	if err := c.ApplyNDCHttpSchemas(config, schemas, logger); err != nil {
-		return nil, errInvalidSchema
-	}
-
 	c.config = config
+	c.upstreams = internal.NewUpstreamManager(c.httpClient, config)
+	if err := c.ApplyNDCHttpSchemas(ctx, config, schemas, logger); err != nil {
+		return nil, fmt.Errorf("failed to validate NDC HTTP schema: %w", err)
+	}
 
 	return config, nil
 }