refactor(ext-oidc): replace auth modules with security extensions

2026-09-16 15:54:19 +00:00
parent 017c2443f4
commit e0795299fc
126 changed files with 2944 additions and 5130 deletions
@@ -0,0 +1,15 @@
+# flash-ext-security-test
+
+Test-scope utilities for applications on `flash-ext-security-core`.
+
+```java
+FlashTest app = FlashTest.of(flash -> flash.apply(new MyApp()).install(new TestSecurity()));
+
+app.request().with(TestSecurity.as(() -> "alice")).get("/me");                 // any principal
+app.request().with(TestSecurity.as(new OidcPrincipal(...))).get("/projects");   // a mechanism's own type
+```
+
+`TestSecurity.as(principal)` hands the principal to the application by reference — `FlashTest`
+serves it in the same JVM — so tests exercise the real `UserResolver`, `RoleResolver` and policies
+with no identity provider running. Tests of the flows themselves use the mechanism's own kit:
+`FakeOidcProvider` and `OidcTokens` in this module for OIDC, a real `POST` for form login.