Package dev.relism.flash.ext.security.test
package dev.relism.flash.ext.security.test
-
ClassDescriptionAn OpenID Provider on a random local port: discovery, keys, and a token endpoint for the authorization code and refresh flows.An OAuth 2.1 client of the application under test, driving its own authorization server the way an MCP client does: discovery (RFC 8414), registration (RFC 7591), authorization code with PKCE, consent, and the token exchange.What the exchange returned.Real tokens from a real provider — Keycloak in Testcontainers, typically.Authenticates test requests as any
Principal, whatever mechanisms the application installs — an OIDC user, an API key, a plain name — without an identity provider.