Move allow logic to authorize view.

oidc_provider/lib/endpoints/authorize.py

@@ -80,14 +80,7 @@ class AuthorizeEndpoint(object):
         except Client.DoesNotExist:
             raise ClientIdError()
 
-    def create_response_uri(self, allow):
+    def create_response_uri(self):
-
-        if not allow:
-            raise AuthorizeError(
-                self.params.redirect_uri,
-                'access_denied',
-                self.grant_type)
-
         try:
             self.validate_params()
 

oidc_provider/views.py

@@ -73,7 +73,12 @@ class AuthorizeView(View):
         allow = True if request.POST.get('allow') else False
 
         try:
-            uri = authorize.create_response_uri(allow)
+            if not allow:
+                raise AuthorizeError(authorize.params.redirect_uri,
+                                     'access_denied',
+                                     authorize.grant_type)
+
+            uri = authorize.create_response_uri()
 
             return HttpResponseRedirect(uri)