MockAuth

MockAuth

A mock OpenID Connect provider for QA and automated tests.

Simulate real OIDC authentication — tokens, redirects, and scopeswithout running a production identity server.

View on GitHub

Example OIDC endpoints

  • Issuer
    https://mockauth.example.com/r/tenant_qa_default_resource/oidc
  • Discovery
    https://mockauth.example.com/r/tenant_qa_default_resource/oidc/.well-known/openid-configuration
  • Authorize
    https://mockauth.example.com/r/tenant_qa_default_resource/oidc/authorize

Core Features

OIDC Compliant

Standard endpoints: discovery, authorize, token, userinfo, and JWKS.

Auth Code + PKCE

Implements industry-standard flows used by modern SPAs and mobile apps.

Redirect Validation

Strict redirect URI validation to mirror production security rules.

Admin Console

Manage tenants, clients, and signing keys via a streamlined UI.

Proxy Mode

Forward authentication to real IdPs while preserving local validation rules.

Deterministic authentication

Predictable tokens and scopes for stable automated tests.

Designed for real development workflows

Works in CI pipelines

Run automated tests with full OIDC flows and predictable authentication.

Perfect for preview environments

Spin up authentication for every deployment without provisioning identity tenants.

Simple local development

Run MockAuth locally and test OAuth/OIDC integrations before production.

Common Use Cases

  1. 1

    Autonomous testing: Develop apps that require OIDC login without relying on production identity providers.

  2. 2

    Reliable authentication tests: Ensure token validation and redirect behavior remain stable regardless of upstream provider changes.

  3. 3

    Simulating authentication scenarios: Simulate scopes, identifiers, and claims without manual user provisioning.

Quick Start

Drop MockAuth into your stack and run full OIDC flows locally or in CI with a single command.

Get StartedView on GitHub

FAQ

Is MockAuth a production identity provider?
No. It is designed for development, QA, and automated testing environments.
Is it OIDC compliant?
Yes. MockAuth exposes standard OIDC endpoints including discovery, JWKS, and Authorization Code + PKCE.
Can it proxy to a real identity provider?
Yes. Proxy mode allows MockAuth to forward requests to an upstream OIDC provider.
Does it validate redirect URIs?
Yes. Redirect URIs are validated with strict matching by default.