@cheellipadi/mock-oidc-provider 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,69 @@
+# mock-oidc-provider
+
+Generic local OIDC provider for development and testing.
+
+This is a proof-of-concept package. It is intended to let local applications exercise
+their normal OIDC authorization-code callback flow without depending on a real
+identity provider account.
+
+It is not a production identity provider and must not be deployed as one.
+
+## Usage
+
+Run the provider from npm in one terminal:
+
+```bash
+pnpm dlx mock-oidc-provider --claim preferred_username=test.user --claim name="Test User"
+```
+
+Or, after installing the package, run the binary directly:
+
+```bash
+mock-oidc-provider --claim preferred_username=test.user --claim name="Test User"
+```
+
+Run the client application in another terminal.
+
+By default the provider uses:
+
+```text
+host: 127.0.0.1
+port: 4010
+issuer: http://localhost:4010/mock/v2.0
+clientId: mock-oidc-client
+```
+
+The provider prints copy-pasteable client application configuration on startup.
+
+## Options
+
+```text
+--host <host>              Bind host. Default: 127.0.0.1
+--port <port>              Bind port. Default: 4010
+--issuer <url>             Issuer URL. Default: http://localhost:<port>/mock/v2.0
+--client-id <id>           Client ID. Default: mock-oidc-client
+--redirect-uri <uri>       Additional allowed localhost redirect URI.
+--claim <key=value>        Add or override an ID token claim. Repeatable.
+-h, --help                 Show help.
+```
+
+The authorization code flow also supports optional PKCE with
+`code_challenge_method=S256`. Non-PKCE local clients continue to work.
+
+## Local package testing
+
+Prefer the tarball flow before publishing. It best matches how consumers will run the package:
+
+```bash
+pnpm build
+pnpm pack
+pnpm dlx "$(pwd)/mock-oidc-provider-0.1.0.tgz" --claim preferred_username=test.user
+```
+
+## Safety defaults
+
+- Runs in the foreground.
+- Allows only localhost or 127.0.0.1 redirect URIs.
+- Uses fake local issuer and client defaults.
+- Does not set cookies or sessions in consuming applications.
+- Does not store or dictate where client applications store tokens.

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+import { getHelpText, HelpRequested, parseArgs } from './config.js';
+import { createProvider } from './provider.js';
+async function main() {
+    let config;
+    try {
+        config = parseArgs(process.argv.slice(2));
+    }
+    catch (error) {
+        if (error instanceof HelpRequested) {
+            console.log(getHelpText());
+            return;
+        }
+        console.error(error instanceof Error ? error.message : error);
+        console.error('');
+        console.error(getHelpText());
+        process.exitCode = 1;
+        return;
+    }
+    const provider = createProvider(config);
+    const started = await provider.start();
+    const metadata = await fetch(`${started.issuer}/.well-known/openid-configuration`).then((res) => res.json());
+    console.log('mock-oidc-provider is running');
+    console.log('');
+    console.log(`Issuer:       ${started.issuer}`);
+    console.log(`Client ID:    ${config.clientId}`);
+    console.log(`Authorize:    ${metadata['authorization_endpoint']}`);
+    console.log(`Token:        ${metadata['token_endpoint']}`);
+    console.log(`JWKS:         ${metadata['jwks_uri']}`);
+    console.log('');
+    console.log('Example client app env:');
+    console.log(`OIDC_MOCK_ISSUER=${started.issuer}`);
+    console.log(`OIDC_CLIENT_ID=${config.clientId}`);
+    console.log('');
+    console.log('Configured claims:');
+    console.log(JSON.stringify(config.claims, null, 2));
+    console.log('');
+    console.log('Press Ctrl+C to stop.');
+    const shutdown = async () => {
+        await provider.stop();
+        process.exit(0);
+    };
+    process.once('SIGINT', () => {
+        void shutdown();
+    });
+    process.once('SIGTERM', () => {
+        void shutdown();
+    });
+}
+main().catch((error) => {
+    console.error(error);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,KAAK,UAAU,IAAI;IACjB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,mCAAmC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAqC,CAAC,CAAC;IAEhJ,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;QAC1B,KAAK,QAAQ,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;QAC3B,KAAK,QAAQ,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,13 @@
+export interface ProviderConfig {
+    host: string;
+    port: number;
+    issuer: string;
+    clientId: string;
+    redirectUris: string[];
+    claims: Record<string, unknown>;
+}
+export declare function parseArgs(args: string[]): ProviderConfig;
+export declare class HelpRequested extends Error {
+    constructor();
+}
+export declare function getHelpText(): string;

package/dist/config.js

@@ -0,0 +1,149 @@
+const defaultHost = '127.0.0.1';
+const defaultPort = 4010;
+const defaultClientId = 'mock-oidc-client';
+const defaultClaims = {
+    sub: 'mock-user',
+    name: 'Mock User',
+    email: 'mock.user@example.test',
+};
+export function parseArgs(args) {
+    let host = defaultHost;
+    let port = defaultPort;
+    let clientId = defaultClientId;
+    let issuer;
+    const redirectUris = ['http://localhost:3000/api/auth/callback/oidc'];
+    const claims = { ...defaultClaims };
+    for (let index = 0; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === '--host') {
+            host = readValue(args, (index += 1), arg);
+            continue;
+        }
+        if (arg === '--port') {
+            port = parsePort(readValue(args, (index += 1), arg));
+            continue;
+        }
+        if (arg === '--issuer') {
+            issuer = normalizeIssuer(readValue(args, (index += 1), arg));
+            assertRootIssuer(issuer);
+            continue;
+        }
+        if (arg === '--client-id') {
+            clientId = readValue(args, (index += 1), arg);
+            continue;
+        }
+        if (arg === '--redirect-uri') {
+            const redirectUri = readValue(args, (index += 1), arg);
+            assertLocalRedirectUri(redirectUri);
+            redirectUris.push(redirectUri);
+            continue;
+        }
+        if (arg === '--claim') {
+            const [key, value] = parseClaim(readValue(args, (index += 1), arg));
+            claims[key] = value;
+            continue;
+        }
+        if (arg === '--help' || arg === '-h') {
+            throw new HelpRequested();
+        }
+        throw new Error(`Unknown option: ${arg}`);
+    }
+    for (const redirectUri of redirectUris) {
+        assertLocalRedirectUri(redirectUri);
+    }
+    return {
+        host,
+        port,
+        issuer: issuer ?? `http://localhost:${port}`,
+        clientId,
+        redirectUris: [...new Set(redirectUris)],
+        claims,
+    };
+}
+export class HelpRequested extends Error {
+    constructor() {
+        super('Help requested');
+    }
+}
+export function getHelpText() {
+    return `mock-oidc-provider
+
+Usage:
+  mock-oidc-provider [options]
+
+Options:
+  --host <host>              Bind host. Default: ${defaultHost}
+  --port <port>              Bind port. Default: ${defaultPort}
+  --issuer <url>             Issuer URL. Default: http://localhost:<port>
+  --client-id <id>           Client ID. Default: ${defaultClientId}
+  --redirect-uri <uri>       Additional allowed localhost redirect URI.
+  --claim <key=value>        Add or override an ID token claim. Repeatable.
+  -h, --help                 Show help.
+
+Example:
+  mock-oidc-provider --claim preferred_username=test.user --claim name="Test User"
+`;
+}
+function readValue(args, index, flag) {
+    const value = args[index];
+    if (!value || value.startsWith('--')) {
+        throw new Error(`${flag} requires a value`);
+    }
+    return value;
+}
+function parsePort(value) {
+    const port = Number(value);
+    if (!Number.isInteger(port) || port < 0 || port > 65535) {
+        throw new Error(`Invalid port: ${value}`);
+    }
+    return port;
+}
+function parseClaim(value) {
+    const equalsIndex = value.indexOf('=');
+    if (equalsIndex <= 0) {
+        throw new Error(`Claim must use key=value format: ${value}`);
+    }
+    const key = value.slice(0, equalsIndex).trim();
+    const rawValue = value.slice(equalsIndex + 1);
+    if (!key) {
+        throw new Error(`Claim must use key=value format: ${value}`);
+    }
+    return [key, coerceClaimValue(rawValue)];
+}
+function coerceClaimValue(value) {
+    if (value === 'true')
+        return true;
+    if (value === 'false')
+        return false;
+    if (value === 'null')
+        return null;
+    if (/^-?\d+(\.\d+)?$/.test(value))
+        return Number(value);
+    return value;
+}
+function normalizeIssuer(value) {
+    return value.replace(/\/+$/, '');
+}
+function assertRootIssuer(value) {
+    const url = new URL(value);
+    if (url.pathname !== '/' && url.pathname !== '') {
+        throw new Error(`Issuer URL must not have a path component: ${value}`);
+    }
+}
+function assertLocalRedirectUri(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error(`Redirect URI must be a valid localhost URL: ${value}`);
+    }
+    const isLocalHost = url.hostname === 'localhost' || url.hostname === '127.0.0.1' || url.hostname === '[::1]';
+    if (!isLocalHost) {
+        throw new Error(`Redirect URI must use localhost or 127.0.0.1: ${value}`);
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        throw new Error(`Redirect URI must use http or https: ${value}`);
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,GAAG,WAAW,CAAC;AAChC,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,aAAa,GAA4B;IAC7C,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,wBAAwB;CAChC,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,IAAI,IAAI,GAAG,WAAW,CAAC;IACvB,IAAI,IAAI,GAAG,WAAW,CAAC;IACvB,IAAI,QAAQ,GAAG,eAAe,CAAC;IAC/B,IAAI,MAA0B,CAAC;IAC/B,MAAM,YAAY,GAAG,CAAC,8CAA8C,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;IAEpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAExB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7D,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvD,sBAAsB,CAAC,WAAW,CAAC,CAAC;YACpC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACpE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,aAAa,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,MAAM,EAAE,MAAM,IAAI,oBAAoB,IAAI,EAAE;QAC5C,QAAQ;QACR,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC;QACE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,UAAU,WAAW;IACzB,OAAO;;;;;;mDAM0C,WAAW;mDACX,WAAW;;mDAEX,eAAe;;;;;;;CAOjE,CAAC;AACF,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,KAAa,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+CAA+C,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC7G,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iDAAiD,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}

package/dist/provider.d.ts

@@ -0,0 +1,10 @@
+import type { ProviderConfig } from './config.js';
+interface StartedProvider {
+    issuer: string;
+    stop: () => Promise<void>;
+}
+export declare function createProvider(config: ProviderConfig): {
+    start: () => Promise<StartedProvider>;
+    stop: () => Promise<void>;
+};
+export {};

package/dist/provider.js

@@ -0,0 +1,21 @@
+import { OAuth2Server } from 'oauth2-mock-server';
+export function createProvider(config) {
+    const server = new OAuth2Server(undefined, undefined, { endpoints: { jwks: '/discovery/v2.0/keys' } });
+    server.service.on('beforeTokenSigning', (token) => {
+        Object.assign(token.payload, config.claims);
+    });
+    async function start() {
+        await server.issuer.keys.generate('RS256');
+        await server.start(config.port, config.host);
+        const issuerUrl = new URL(config.issuer);
+        issuerUrl.port = String(server.address().port);
+        const issuer = issuerUrl.toString().replace(/\/$/, '');
+        server.issuer.url = issuer;
+        return { issuer, stop };
+    }
+    async function stop() {
+        await server.stop();
+    }
+    return { start, stop };
+}
+//# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASlD,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;IAEvG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;QAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,KAAK;QAClB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC;QAE3B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,UAAU,IAAI;QACjB,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@cheellipadi/mock-oidc-provider",
+  "version": "0.1.0",
+  "description": "Local OIDC provider for development and testing.",
+  "license": "MIT",
+  "keywords": [
+    "oidc",
+    "oauth2",
+    "mock",
+    "local-development",
+    "pkce"
+  ],
+  "type": "module",
+  "bin": {
+    "mock-oidc-provider": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "oauth2-mock-server": "^8.2.3"
+  },
+  "devDependencies": {
+    "@types/node": "^24.10.1",
+    "jose": "^6.1.3",
+    "tsx": "^4.20.6",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.13"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx src/cli.ts",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "pack:dry-run": "pnpm pack --dry-run"
+  }
+}