Package dev.relism.flash.ext.security.test

Class FakeOidcProvider

java.lang.Object

dev.relism.flash.ext.security.test.FakeOidcProvider

All Implemented Interfaces:

AutoCloseable

public final class FakeOidcProvider
extends Object
implements AutoCloseable

An OpenID Provider on a random local port: discovery, keys, and a token endpoint for the authorization code and refresh flows. Sign-in is approved at once, as signInAs(java.lang.String, java.util.Map<java.lang.String, java.lang.Object>).

Constructor Summary

Constructors

Constructor	Description
FakeOidcProvider()

Method Summary

Modifier and Type	Method	Description
Consumer<dev.relism.flash.testing.FlashRequest>	bearer(String subject, Map<String,Object> claims)	Sends the request with a bearer token(java.lang.String, java.util.Map<java.lang.String, java.lang.Object>).
FakeOidcProvider	client(String secret, String... redirectUris)	Refuses, from now on, any other secret or redirect URI — as a provider with this client registered would.
void	close()
FakeOidcProvider	expiresIn(long seconds)	Lifetime of the tokens sign-in and refresh issue — 0 expires a session at once.
String	idToken(String subject, Map<String,Object> claims)	A signed ID token for subject, which a resource server must never take for an access token.
String	issuer()
FakeOidcProvider	signInAs(String subject, Map<String,Object> claims)	Who sign-in and refresh vouch for, with what extra claims; the client id is always app.
String	token(String subject, Map<String,Object> claims)	A signed access token for subject, valid five minutes, with claims added — typ at+jwt (RFC 9068).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

FakeOidcProvider

public FakeOidcProvider()
                 throws Exception

Throws:

Exception

Method Details

client

public FakeOidcProvider client(String secret,
 String... redirectUris)

Refuses, from now on, any other secret or redirect URI — as a provider with this client registered would.

issuer

public String issuer()

signInAs

public FakeOidcProvider signInAs(String subject,
 Map<String,Object> claims)

Who sign-in and refresh vouch for, with what extra claims; the client id is always app.

expiresIn

public FakeOidcProvider expiresIn(long seconds)

Lifetime of the tokens sign-in and refresh issue — 0 expires a session at once.

token

public String token(String subject,
 Map<String,Object> claims)

A signed access token for subject, valid five minutes, with claims added — typ at+jwt (RFC 9068).

idToken

public String idToken(String subject,
 Map<String,Object> claims)

A signed ID token for subject, which a resource server must never take for an access token.

bearer

public Consumer<dev.relism.flash.testing.FlashRequest> bearer(String subject,
 Map<String,Object> claims)

Sends the request with a bearer token(java.lang.String, java.util.Map<java.lang.String, java.lang.Object>).

close

public void close()

Specified by:

close in interface AutoCloseable