@wheatstalk/oidc-mock

OIDC Mock

A CDK construct that sets up an OIDC Identity Provider REST API for integration testing.

Features

• Passwordless Authorization Code Flow
• Unrestricted redirect_uri
• Convention-based client_id / client_secret
• PKCE verification for S256 and plain
• Authorization code grant
• Client credentials grant
• Username grant
• Refresh token grant

Scopes

Scope	Description
openid	Enable OIDC and provide a JWT
offline_access	Enable provide refresh tokens

Usage

import { App, Stack, CfnOutput } from 'aws-cdk-lib';
import { OidcMockApi, OidcMockTable } from '@wheatstalk/oidc-mock';

const app = new App();
const stack = new Stack(app, 'integ-oidc-mock');

const mockApi = new OidcMockApi(stack, 'OidcMockApi');

new CfnOutput(stack, 'OidcMockApiUrl', {
  value: mockApi.openidConfigurationUrl,
});

app.synth();

Mock endpoint addresses

Path	Description
/auth	Authorization endpoint
/token	Token endpoint
/userinfo	User info endpoint (planned)
/.well-known/openid-configuration	OpenID auto-configuration endpoint
/.well-known/jwks.json	JWKS endpoint (crypto signature keyset for JWTs)