OIDC Authorization Server for Test Purposes

This is a simple command-line tool that starts an OIDC provider endpoint for testing the Single Sign-on functionality of Sonata Digital applications.

Installation

• npm

  npm -g i @bravura/test-auth

• yarn

  yarn global add @bravura/test-auth

Usage

Please run npx @bravura/test-auth -h for a complete description of the usage.

Example

test-auth -a https://digi.app

Options

| Alias | Option | Description | | --- | --- | --- | | -V | --version | output the version number | | -s | --server <server> | the scheme and domain parts of the authorization server URL (default: "http://localhost") | | -p | --port <port> | the port that the authorisation server listens to (default: 3030) | | -i | --issuer <issuer> | used in the iss claim of the tokens (default: <server>:<port>) | | -S | --sonata-url <sonataServiceURL> | The complete URL to the Sonata Service JSON endpoint (default: "http://localhost:8080/sonata/rest/sbs") | | -b | --bypass | bypass user validation on Sonata, typically used for testing auto provisioning (default: false) | | -a | --app-url <appURL> | a list of base URLs separated by spaces, used to generate client configurations and to derive the redirect_uris (default: "http://localhost:9080/foundation sonata://oauth2/callback http://localhost:8080/sonata/workflow/app") | | -k | --ssl-private-key <sslPrivateKey> | the path to the SSL private key, required for https server scheme | | -keypass | --key-passphrase <keyPassphrase> | private key passphrase | | -c | --ssl-public-certificate <sslPublicCertificate> | the path to the SSL public certificate, required for https server scheme | | -hci | --hashed-client-ids | use app URLs to generate client IDs, instead of random numbers (default: false) | | -ate | --access-token-expiry <accessTokenExpiry> | the expiry time in seconds for the access tokens (default: 600) | | -aud | --audience <audience> | used in the aud claim of the tokens (default: "api://sonata") | | -sus | --step-up-scope <stepUpScope> | the custom scope for Two-Factor Authentication (default: "tfa_test_scope") | | -h | --help | display help for command |