Skip to content

Latest commit

 

History

History
48 lines (36 loc) · 1.59 KB

README.md

File metadata and controls

48 lines (36 loc) · 1.59 KB
Raw

OIDC Mock

A CDK construct that sets up an OIDC Identity Provider REST API for integration testing.

Features

  • Passwordless Authorization Code Flow
  • Unrestricted redirect_uri
  • Convention-based client_id / client_secret
  • PKCE verification for S256 and plain
  • Authorization code grant
  • Client credentials grant
  • Username grant
  • Refresh token grant

Scopes

Scope Description
openid Enable OIDC and provide a JWT
offline_access Enable provide refresh tokens

Usage

import { App, Stack, CfnOutput } from 'aws-cdk-lib';
import { OidcMockApi, OidcMockTable } from '@wheatstalk/oidc-mock';

const app = new App();
const stack = new Stack(app, 'integ-oidc-mock');

const mockApi = new OidcMockApi(stack, 'OidcMockApi');

new CfnOutput(stack, 'OidcMockApiUrl', {
  value: mockApi.openidConfigurationUrl,
});

app.synth();

Mock endpoint addresses

Path Description
/auth Authorization endpoint
/token Token endpoint
/userinfo User info endpoint (planned)
/.well-known/openid-configuration OpenID auto-configuration endpoint
/.well-known/jwks.json JWKS endpoint (crypto signature keyset for JWTs)