solid-server 5.8.7 → 5.8.8-5fdbfa12

package/test/resources/accounts/db/oidc/rp/clients/_key_https%3A%2F%2Flocalhost%3A3457.json

@@ -0,0 +1 @@
+{"provider":{"url":"https://localhost:3457","configuration":{"issuer":"https://localhost:3457","jwks_uri":"https://localhost:3457/jwks","scopes_supported":["openid","offline_access"],"response_types_supported":["code","code token","code id_token","id_token","id_token token","code id_token token","none"],"token_types_supported":["legacyPop","dpop"],"response_modes_supported":["query","fragment"],"grant_types_supported":["authorization_code","implicit","refresh_token","client_credentials"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256","RS384","RS512","none"],"token_endpoint_auth_methods_supported":["client_secret_basic"],"token_endpoint_auth_signing_alg_values_supported":["RS256"],"display_values_supported":[],"claim_types_supported":["normal"],"claims_supported":[],"claims_parameter_supported":false,"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_request_uri_registration":false,"check_session_iframe":"https://localhost:3457/session","end_session_endpoint":"https://localhost:3457/logout","authorization_endpoint":"https://localhost:3457/authorize","token_endpoint":"https://localhost:3457/token","userinfo_endpoint":"https://localhost:3457/userinfo","registration_endpoint":"https://localhost:3457/register"},"jwks":{"keys":[{"kid":"lNZOB-DPE1k","kty":"RSA","alg":"RS256","n":"uvih8HfZj7Wu5Y8knLHxRY6v7oHL2jXWD-B6hXCreYhwaG9EEUt6Rp94p8-JBug3ywo8C_9dNg0RtQLEttcIC_vhqqlJI3pZxpGKXuD9h7XK-PppFVvgnfIGADG0Z-WzbcGDxlefStohR31Hjw5U3ioG3VtXGAYbqlOHM1l2UgDMJwBD5qwFmPP8gp5E2WQKCsuLvxDuOrkAbSDjw2zaI3RRmbLzdj4QkGej8GXhBptgM9RwcKmnoXu0sUdlootmcdiEg74yQ9M6EshNMhiv4k_W0rl7RqVOEL2PsAdmdbF_iWL8a90rGYOEILBrlU6bBR2mTvjV_Hvq-ifFy1YAmQ","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"Y38YKDtydoE","kty":"RSA","alg":"RS384","n":"tfgZKLjc8UMIblfAlVibJI_2uAxDNprn2VVLebS0sp6d1mtCXQkMYLlJ6e-7kavl8we391Ovnq5bRgpsFRq_LtRX9MpVlfioAUHwWPEG-R6vrQjgo4uynVhI3UEPHyNmZA5J4u34HNVTfAgmquomwwOmOv29ZNRxuYP1kVtscz1JeFPwg6LA7BxWrLc9ev4FQR6tjJKdo2kdLjAXR92odbCzJZ_jdYT3vIVCexMHxhoKnqCImkhfgKbGXcPHXWcelmuA2tzBaLut-Jjo0nJVQjRNDqy0Gyac0TptwFIxaiyHeTqugolUmEaJSfBSLszIRdlOTIGPJ7zdg5dJFK_Lxw","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"WyMVv6BJ5Dk","kty":"RSA","alg":"RS512","n":"5JDlpbm2TjSW1wpdUZc5NHOqVVrNH_GumoODK_mk-MqImaIRpdR9b1ZJrK6FrW7HIF2bXvebD7olmp9a1goqe-ILbL_ORmhzlhRtyhjWQ-UOZqK5yOXqXXGQXgmok6TN-s55A-h_g12A7Yk5Y5S8EVa9EA4Axwqvm-Q_AkH0yS1qJo6BXYXb1fx205ucx-Ccot2LEBfxv8M7NOFTa-_G-sNchiKQMRoLhbZtLbSK2R1jkqGciEiRSLeXNG4nDu7Wd91-vhBixA1McxnzW96mW8lQwNXXo4gNH7SjONtYLlPQhZVEbmsQmXrOQN8a5RDkybFOIsbucItizSE9V_D7WQ","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"UykSj_HLgFA","kty":"RSA","alg":"RS256","n":"u79eQlGJN2XFNR-uEmPVtrB_ENRqaS81o6m63tZ5-PwhGHCwJ7rfVnnnvf6Ij_p91Z9pNpWBIVyZcw6UmQIoIBH-3BfxdaqhBxX9bf_N78TKj8_HU5IYjGijale4gog3kj9W2tJJO7R9iA43msjwLRD7pbAHp1iKFJgVTSXJlyLRbC82Dj4ivsEgJjPGvZt16OsGP5myIQwXEGzSPcEI0R9daZE5iM6xFZosaJ8B77eU-Aj3ciwxUBPi5BSZi2P1ZsF4QgSj3N7ZLbVKNW4FFr84IamA2YI0D7PyyNAE2PUZT8n0jHWRJKunuZuy5mgBY8H41KdBI6gNJqY90nHeJw","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"BJDNTt8RpPE","kty":"RSA","alg":"RS384","n":"nXTd5AoT220nBkW6Zeax8caUI7_Tt0y4v9TEW8TOrzCVvhLBiKpQPjILUTfkGHzxPtysEzDQFSYdHWvg_fvGYItjJBunBMsKCNcb2_CDr2HXD6C0s62bAgct8bBSoaT1MLQ_3MaFKXSF3ZuB87X2B8CVUJ386HP2GY1kl54BuMdFELNZYhy9S_D0KHnQls52Vvb99X9WaYOyxvfr03PG-9EycnkWas5tn1pPFzT0DtJtBJ4IBtXQxTr98jpn_MCz1gRnMgzzkfSOcrMkkMXxePqxNINVKFXtRy7DaJiFOcCMbuK2RJUkSfY2uKcx0aKbp5Xhvix1W8N7c0Y90i6_6w","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"z8iijSOOIs4","kty":"RSA","alg":"RS512","n":"rPCHP9XeTGOLf1Ezxeq_bdGdvYQZa993YcSVudT0EN6drTWqjykhUVEkT4MGAvLvax38kLARbPUTgMUV9UckDDWn6lRq4q6IZ5pytNOieQKZHzjEmQGzlbnEn1F2m1i5SAfBL-qsnt5q2RXMAiIUXk9q1ChJEHJxOZxnRIoQMc7yTsjjSdtIZKePFiYFn0nsl3A234ByyIBRjzZeoYEtTQKjDR7fP9LO78oZAgpwoGqmfI4IltqQYkFoqrN8I8l1yiJGyuvZRgDXUZ2fxGOQx2WD4xvlFL2TOCfN1UaPE9R4JdbRLLAOf5u1Sqnh4XTjDBhBbVodsmmbtvk4wFo-GQ","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"zD76wa11A2Y","kty":"RSA","alg":"RS256","n":"nMaSioq1An1J3tbkmc-zRrR8lkbP-WUVRuYhDxQvV-OcBw1R6cdyCcoeFJ1zuUT7ne6BlU6GMPRHuRKaH0KuOaiktUYtXm06T_HvtKFgCQSAKjMUj_ZHfTAJP8ahUsIc0D995XKp7nIGRF7Iy7I24QQFPRh7PmGlREZ52GJgYQgbm020-sWani0MqHoUFBlWxZW9NEqY1c3brN_qWnzjRKly6Kkk3sW1XHPcRLvoHnHQ6TKXJ8pfl-bNjTfK6zq9fDCZ_TY3qQZy66yT_2XPO6X0GHTdJsZlCj7Jg0qrilTHUkJra1bppTSAtVSQnSmYt_IV8zOYiVdJ3kw2khPcKw","e":"AQAB","key_ops":["verify"],"ext":true}]}},"defaults":{},"registration":{"redirect_uris":["https://localhost:3457/api/oidc/rp/https%3A%2F%2Flocalhost%3A3457"],"client_id":"abbf27de893abf7d05279547c22d9366","client_secret":"73a2607f06ac2faba75aa10505e1f313","response_types":["code","id_token token","code id_token token"],"grant_types":["authorization_code","implicit","refresh_token","client_credentials"],"application_type":"web","client_name":"Solid OIDC RP for https://localhost:3457","id_token_signed_response_alg":"RS256","token_endpoint_auth_method":"client_secret_basic","default_max_age":86400,"post_logout_redirect_uris":["https://localhost:3457/goodbye"],"registration_access_token":"eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2xvY2FsaG9zdDozNDU3IiwiYXVkIjoiYWJiZjI3ZGU4OTNhYmY3ZDA1Mjc5NTQ3YzIyZDkzNjYiLCJzdWIiOiJhYmJmMjdkZTg5M2FiZjdkMDUyNzk1NDdjMjJkOTM2NiJ9.CJ0sYzZ41Z91M5N_BOM-krAHyErrzyNF2BErBsl-ELkRvpZOucDClqMAygBcz19GJkBUP_HtfnY21M6D0t-LHtMj9ZpJiu1tE4G2wAmMhNDUZN907CdU0EZEmmSjZHQE78xi2-qyB91CBYDBAqtxfOpf40U4GBKmb5dqIsUJNUuOxqyQZv3aZTOjupFx6K3DtxEgkK46boXe2wlr9X1mqzX8dGCemHugIbU4UfhbMxL7IOW7jSYOvav1VQLLHiaGL_4No4umPVzgwI8-n64Ng2d86zZeN2DJEFSQwdLui9Cq6D2YMFcT4M5LhYdwFNi7f9dsK4tFjc5FK9PsI1PLVg","registration_client_uri":"https://localhost:3457/register/abbf27de893abf7d05279547c22d9366","client_id_issued_at":1766876284,"client_secret_expires_at":0},"store":{}}

package/test/resources/accounts/tim.localhost/hello.html

@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title></title>
+</head>
+<body>
+Hello!
+</body>
+</html>

package/test/resources/accounts-acl/config/templates/emails/welcome-test.js

@@ -0,0 +1,39 @@
+'use strict'
+
+/**
+ * Returns a partial Email object (minus the `to` and `from` properties),
+ * suitable for sending with Nodemailer.
+ *
+ * Used to send a Welcome email after a new user account has been created.
+ *
+ * @param data {Object}
+ *
+ * @param data.webid {string}
+ *
+ * @return {Object}
+ */
+function render (data) {
+  return {
+    subject: 'Welcome to Solid',
+
+    /**
+     * Text version of the Welcome email
+     */
+    text: `Welcome to Solid!
+
+Your account has been created.
+
+Your Web Id: ${data.webid}`,
+
+    /**
+     * HTML version of the Welcome email
+     */
+    html: `<p>Welcome to Solid!</p>
+
+<p>Your account has been created.</p>
+
+<p>Your Web Id: ${data.webid}</p>`
+  }
+}
+
+module.exports.render = render

package/test/resources/accounts-acl/config/templates/new-account/favicon.ico.acl

@@ -0,0 +1,26 @@
+# ACL for the default favicon.ico resource
+# Individual users will be able to override it as they wish
+# Public-readable
+
+@prefix acl: <http://www.w3.org/ns/auth/acl#>.
+@prefix foaf: <http://xmlns.com/foaf/0.1/>.
+
+<#owner>
+    a acl:Authorization;
+
+    acl:agent
+        <{{webId}}>;
+
+    acl:accessTo </favicon.ico>;
+
+    acl:mode
+        acl:Read, acl:Write, acl:Control.
+
+<#public>
+    a acl:Authorization;
+
+    acl:agentClass foaf:Agent;  # everyone
+
+    acl:accessTo </favicon.ico>;
+
+    acl:mode acl:Read.

package/test/resources/accounts-acl/config/templates/new-account/index.html

@@ -0,0 +1,28 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Solid User Profile</title>
+  <link rel="stylesheet" href="/common/css/bootstrap.min.css">
+</head>
+<body>
+<div class="container">
+  <h3>Solid User Profile</h3>
+</div>
+<div class="container">
+  <div class="row">
+    <div class="col-md-12">
+      <p style="margin-top: 3em; margin-bottom: 3em;">
+        Welcome to your Solid user profile.
+      </p>
+      <p>
+        Your Web ID is:<br />
+
+        <code>{{webId}}</code>
+      </p>
+    </div>
+  </div>
+</div>
+</body>
+</html>

package/test/resources/accounts-acl/config/templates/new-account/index.html.acl

@@ -0,0 +1,22 @@
+@prefix acl: <http://www.w3.org/ns/auth/acl#>.
+@prefix foaf: <http://xmlns.com/foaf/0.1/>.
+
+<#owner>
+    a acl:Authorization;
+
+    acl:agent
+        <{{webId}}>;
+
+    acl:accessTo </index.html>;
+
+    acl:mode
+        acl:Read, acl:Write, acl:Control.
+
+<#public>
+    a acl:Authorization;
+
+    acl:agentClass foaf:Agent;  # everyone
+
+    acl:accessTo <./index.html>;
+
+    acl:mode acl:Read.

package/test/resources/accounts-acl/config/templates/new-account/profile/card

@@ -0,0 +1,27 @@
+@prefix solid: <http://www.w3.org/ns/solid/terms#>.
+@prefix foaf: <http://xmlns.com/foaf/0.1/>.
+@prefix pim: <http://www.w3.org/ns/pim/space#>.
+@prefix schema: <http://schema.org/>.
+@prefix ldp: <http://www.w3.org/ns/ldp#>.
+
+<>
+    a foaf:PersonalProfileDocument ;
+    foaf:maker <#me> ;
+    foaf:primaryTopic <#me> .
+
+<#me>
+    a foaf:Person ;
+    a schema:Person ;
+
+    foaf:name "{{name}}" ;
+
+    solid:account </> ;  # link to the account uri
+    pim:storage </> ;    # root storage
+    solid:oidcIssuer <{{idp}}> ; # identity provider
+
+
+    ldp:inbox </inbox/> ;
+
+    pim:preferencesFile </settings/prefs.ttl> ;  # private settings/preferences
+    solid:publicTypeIndex </settings/publicTypeIndex.ttl> ;
+    solid:privateTypeIndex </settings/privateTypeIndex.ttl> .

package/{default-templates/new-account/inbox/.acl → test/resources/accounts-acl/config/templates/new-account/profile/card.acl}

@@ -1,4 +1,4 @@
-# ACL resource for the profile Inbox
+# ACL for the WebID Profile document
 
 @prefix acl: <http://www.w3.org/ns/auth/acl#>.
 @prefix foaf: <http://xmlns.com/foaf/0.1/>.
@@ -9,18 +9,17 @@
     acl:agent
         <{{webId}}>;
 
-    acl:accessTo <./>;
-    acl:default <./>;
+    acl:accessTo <./card>;
 
     acl:mode
         acl:Read, acl:Write, acl:Control.
 
-# Public-appendable but NOT public-readable
+# Public-readable
 <#public>
     a acl:Authorization;
 
     acl:agentClass foaf:Agent;  # everyone
 
-    acl:accessTo <./>;
+    acl:accessTo <./card>;
 
-    acl:mode acl:Append.
+    acl:mode acl:Read.

package/test/resources/accounts-acl/config/templates/new-account/settings/prefs.ttl

@@ -0,0 +1,9 @@
+@prefix dct: <http://purl.org/dc/terms/>.
+@prefix pim: <http://www.w3.org/ns/pim/space#>.
+
+<>
+  a pim:ConfigurationFile;
+
+  dct:title "Preferences file" .
+
+{{#if email}}<{{webId}}> foaf:mbox <mailto:{{{email}}}> .{{/if}}

package/test/resources/accounts-acl/config/templates/new-account/settings/privateTypeIndex.ttl

@@ -0,0 +1,4 @@
+@prefix solid: <http://www.w3.org/ns/solid/terms#>.
+<>
+    a solid:TypeIndex ;
+    a solid:UnlistedDocument.

package/test/resources/accounts-acl/config/templates/new-account/settings/publicTypeIndex.ttl

@@ -0,0 +1,4 @@
+@prefix solid: <http://www.w3.org/ns/solid/terms#>.
+<>
+    a solid:TypeIndex ;
+    a solid:ListedDocument.

package/test/resources/accounts-acl/config/templates/new-account/settings/publicTypeIndex.ttl.acl

@@ -0,0 +1,25 @@
+# ACL resource for the Public Type Index
+
+@prefix acl: <http://www.w3.org/ns/auth/acl#>.
+@prefix foaf: <http://xmlns.com/foaf/0.1/>.
+
+<#owner>
+    a acl:Authorization;
+
+    acl:agent
+        <{{webId}}>;
+
+    acl:accessTo <./publicTypeIndex.ttl>;
+
+    acl:mode
+        acl:Read, acl:Write, acl:Control.
+
+# Public-readable
+<#public>
+    a acl:Authorization;
+
+    acl:agentClass foaf:Agent;  # everyone
+
+    acl:accessTo <./publicTypeIndex.ttl>;
+
+    acl:mode acl:Read.

package/test/resources/accounts-acl/config/templates/new-account/settings/serverSide.ttl

@@ -0,0 +1,14 @@
+@prefix dct: <http://purl.org/dc/terms/>.
+@prefix pim: <http://www.w3.org/ns/pim/space#>.
+@prefix solid: <http://www.w3.org/ns/solid/terms#>.
+@prefix unit: <http://www.w3.invalid/ns#>.
+
+<>
+  a pim:ConfigurationFile;
+
+  dct:description "Administrative settings for the server that are only readable to the user." .
+
+</>
+    solid:storageQuota "2000" .
+    
+    

package/test/resources/accounts-acl/config/templates/server/index.html

@@ -0,0 +1,35 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Welcome to Solid</title>
+  <link rel="stylesheet" href="/common/css/bootstrap.min.css">
+</head>
+<body>
+<div class="container">
+  <h3>Welcome to Solid</h3>
+</div>
+<div class="container">
+  <div class="row">
+    <div class="col-md-12">
+      <p style="margin-top: 3em; margin-bottom: 3em;">
+        If you have not already done so, please create an account.
+      </p>
+    </div>
+  </div>
+  <div class="row">
+    <div class="col-md-2">
+      <form method="get" action="/register">
+        <button type="submit" class="btn btn-primary" id="register">Register</button>
+      </form>
+    </div>
+    <div class="col-md-10">
+      <form method="get" action="/login">
+        <button type="submit" class="btn btn-primary" id="login">Login</button>
+      </form>
+    </div>
+  </div>
+</div>
+</body>
+</html>

package/{.acl → test/resources/accounts-acl/config/templates/server/index.html.acl}

@@ -1,10 +1,11 @@
-# Root ACL resource for the root
 @prefix acl: <http://www.w3.org/ns/auth/acl#>.
 @prefix foaf: <http://xmlns.com/foaf/0.1/>.
 
 <#public>
     a acl:Authorization;
+
     acl:agentClass foaf:Agent;  # everyone
-    acl:accessTo </>;
-    acl:default </common/>;
+
+    acl:accessTo <./index.html>;
+
     acl:mode acl:Read.

package/test/resources/accounts-acl/config/views/account/register.hbs

@@ -0,0 +1,58 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Register</title>
+  <link rel="stylesheet" href="/common/css/bootstrap.min.css">
+</head>
+<body>
+<div class="container">
+  <h4>Register</h4>
+</div>
+<div class="container">
+  <form method="post" action="/api/accounts/new">
+    <div class="form-group">
+      {{#if error}}
+        <div class="row">
+          <div class="col-md-12">
+            <p class="text-danger"><strong>{{error}}</strong></p>
+          </div>
+        </div>
+      {{/if}}
+      <div class="row">
+        <div class="col-md-12">
+          <label for="username">Username:</label>
+          <input type="text" class="form-control" name="username" id="username" placeholder="alice" />
+        </div>
+      </div>
+      <div class="row">
+        <div class="col-md-12">
+          <label for="password">Password:</label>
+          <input type="password" class="form-control" name="password" id="password" />
+        </div>
+      </div>
+      <div class="row">
+        <div class="col-md-12">
+          <label for="name">Name:</label>
+          <input type="name" class="form-control" name="name" id="name" />
+        </div>
+      </div>
+      <div class="row">
+        <div class="col-md-12">
+          <label for="email">Email:</label>
+          <input type="email" class="form-control" name="email" id="email" />
+        </div>
+      </div>
+      <input type="hidden" name="returnToUrl" value="{{returnToUrl}}" />
+
+    </div>
+    <button type="submit" class="btn btn-primary" id="register">Register</button>
+
+    <div>Already have an account?
+      <a href="/login?returnToUrl={{{returnToUrl}}}">Log In</a>
+    </div>
+  </form>
+</div>
+</body>
+</html>

package/test/resources/accounts-acl/config/views/auth/consent.hbs

@@ -0,0 +1,49 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>{{title}}</title>
+  <!-- Bootstrap CSS and Theme for demo purposes -->
+  <link rel="stylesheet" href="/common/css/bootstrap.min.css">
+  <link rel="stylesheet" href="/common/css/solid.css">
+</head>
+<body>
+<div class="container title">
+  <h1>Authorize {{app_origin}} to access your Pod?</h1>
+  <div class="panel panel-default">
+    <div class="panel-body">
+      <div class="page-title">
+        <p>Solid allows you to precisely choose what other people and apps can read and write in a Pod. This version of the authorization user interface (node-solid-server V5.1) only supports the toggle of global access permissions to all of the data in your Pod.</p>
+        <p><strong>If you don’t want to set these permissions at a global level, uncheck all of the boxes below, then click authorize.</strong> This will add the application origin to your authorization list, without granting it permission to any of your data yet. You will then need to manage those permissions yourself by setting them explicitly in the places you want this application to access.</p>
+        <p>By clicking Authorize, any app from {{app_origin}} will be able to:</p>
+      </div>
+      <form method="post" action="/sharing">
+
+        <input id="read" type="checkbox" name="access_mode" value="Read" checked>
+        <label for="read">Read all documents in the Pod</label>
+        <br>
+
+        <input id="write" type="checkbox" name="access_mode" value="Write" checked>
+        <label for="write">Add data to existing documents, and create new documents</label>
+        <br>
+
+        <input id="append" type="checkbox" name="access_mode" value="Append" checked>
+        <label for="append">Modify and delete data in existing documents, and delete documents</label>
+        <br>
+
+        <input id="control" type="checkbox" name="access_mode" value="Control">
+        <label for="control">Give other people and apps access to the Pod, or revoke their (and your) access</label>
+        <br>
+        <br>
+
+        <button type="submit" class="btn btn-primary" name="consent" value="true">Authorize</button>
+        <button type="submit" class="btn btn-default" name="cancel" value="true">Cancel</button>
+        {{> auth/auth-hidden-fields}}
+      </form>
+      <p><i>This server (node-solid-server V5.1) only implements a limited subset of OpenID Connect, and doesn’t yet support token issuance for applications. OIDC Token Issuance and fine-grained management through this authorization user interface is currently in the development backlog for node-solid-server</i></p>
+    </div>
+  </div>
+</div>
+</body>
+</html>

package/test/resources/accounts-acl/config/views/auth/goodbye.hbs

@@ -0,0 +1,20 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Logged Out</title>
+  <link rel="stylesheet" href="/common/css/bootstrap.min.css">
+</head>
+<body>
+<div class="container">
+  <h3>You have logged out.</h3>
+</div>
+<div class="container">
+  <form method="get" action="/login">
+    <button type="submit" class="btn btn-primary"
+            id="login">Login Again</button>
+  </form>
+</div>
+</body>
+</html>

package/test/resources/accounts-acl/config/views/auth/login.hbs

@@ -0,0 +1,51 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Login</title>
+  <link rel="stylesheet" href="/common/css/bootstrap.min.css">
+</head>
+<body>
+<div class="container">
+  <h4>Login</h4>
+</div>
+<div class="container">
+  <form method="post" action="/login">
+    <div class="form-group">
+      {{#if error}}
+        <div class="row">
+          <div class="col-md-12">
+            <p class="text-danger"><strong>{{error}}</strong></p>
+          </div>
+        </div>
+      {{/if}}
+      <div class="row">
+        <div class="col-md-12">
+          <label for="username">Username:</label>
+          <input type="text" class="form-control" name="username" id="username" placeholder="alice" />
+        </div>
+      </div>
+      <div class="row">
+        <div class="col-md-12">
+          <label for="password">Password:</label>
+          <input type="password" class="form-control" name="password" id="password" />
+        </div>
+      </div>
+      <input type="hidden" name="response_type" id="response_type" value="{{response_type}}" />
+      <input type="hidden" name="display" id="display" value="{{display}}" />
+      <input type="hidden" name="scope" id="scope" value="{{scope}}" />
+      <input type="hidden" name="client_id" id="client_id" value="{{client_id}}" />
+      <input type="hidden" name="redirect_uri" id="redirect_uri" value="{{redirect_uri}}" />
+      <input type="hidden" name="state" id="state" value="{{state}}" />
+      <input type="hidden" name="nonce" id="nonce" value="{{nonce}}" />
+    </div>
+    <button type="submit" class="btn btn-primary" id="login">Login</button>
+
+    <div>Don't have an account?
+      <a href="/register?returnToUrl={{{postRegisterUrl}}}">Register</a>
+    </div>
+  </form>
+</div>
+</body>
+</html>

package/test/resources/accounts-acl/db/oidc/op/clients/_key_77bb3b35edb1f3f7b887c25d1211a491.json

@@ -0,0 +1 @@
+{"redirect_uris":["https://localhost:7777/api/oidc/rp/https%3A%2F%2Flocalhost%3A7777"],"client_id":"77bb3b35edb1f3f7b887c25d1211a491","client_secret":"98e44615d114b211dbafbf021d9d02aa","response_types":["code","id_token token","code id_token token"],"grant_types":["authorization_code","implicit","refresh_token","client_credentials"],"application_type":"web","client_name":"Solid OIDC RP for https://localhost:7777","id_token_signed_response_alg":"RS256","token_endpoint_auth_method":"client_secret_basic","default_max_age":86400,"post_logout_redirect_uris":["https://localhost:7777/goodbye"]}