🔐 OIDC Authorization Test Page
📋 Test Instructions:
1. Click on one of the test links below
2. You will be redirected to the login page if not authenticated
3. After login, you will see the consent page (for oidc-client)
4. Click "Allow" to complete the authorization flow
🧪 Test Authorization Flows
OIDC Client (with consent required):
Test OIDC Client
GET /oauth2/authorize?
response_type=code&
client_id=oidc-client&
redirect_uri=http://localhost:8080/authorized&
scope=openid%20profile%20email%20read%20write&
state=test123
Test Client (no consent required):
Test Client (Postman)
GET /oauth2/authorize?
response_type=code&
client_id=test-client&
redirect_uri=https://oauth.pstmn.io/v1/callback&
scope=openid%20profile%20email&
state=test456
📊 Client Configuration
OIDC Client:
Client ID: oidc-client
Client Secret: secret
Redirect URIs:
- http://localhost:8080/authorized
- http://localhost:8080/login/oauth2/code/oidc-client
Scopes: openid, profile, email, read, write
Consent Required: Yes
Test Client:
Client ID: test-client
Client Secret: test-secret
Redirect URIs:
- https://oauth.pstmn.io/v1/callback
- http://localhost:3000/callback
Scopes: openid, profile, email, read, write
Consent Required: No
👥 Test Users
Username: admin | Password: admin
Username: user | Password: password
⚠️ Important Notes:
• The OIDC client will show the consent page because it requires authorization consent
• The test client will skip the consent page
• Make sure you're logged in before testing the authorization flows
• The redirect URIs must match exactly what's configured in the client