🛠️ Get a better mock auth solution

petertgiles commented 3 months ago

🛠️ Tooling

Our current mock auth solution is OK but is not great for automated testing. Is there a better solution out there?

🕵️ Details

Some things we have that we don't want to lose:

can be used interactively
can be used in automated testing
can issue an access token
can refresh a token set
has well-known, end-session, and introspection end points

Some things we'd like to get that we don't have:

can issue a token for testing without visiting a page
can actually end a session
can reject bad tokens

✅ Acceptance Criteria

[ ] new solution doesn't lose any of our existing functionality
[ ] new solution is better than what we have

mnigh commented 3 months ago

@petertgiles We are a couple patch versions behind the latest, 2.1.9, at 2.1.1. Anything there that is worth updating if we can't find something else?

https://github.com/GCTC-NTGC/gc-digital-talent/blob/2e69b4649bf479f26d279326976f5e223a401f2f/docker-compose.yml#L87

mnigh commented 3 months ago

👀 https://github.com/navikt/mock-oauth2-server/pull/645

petertgiles commented 2 weeks ago

Doesn't look like there is anything exciting for us to me.

GCTC-NTGC / gc-digital-talent