@loopback/mock-oauth2-provider

This package provides an app which mocks the OAuth2 authorization flow login with a social app like facebook, google, etc

• Endpoints :

- /oauth/dialog - opens the oauth2 flow, redirects to login page - /login - loads the login page - /login_submit - submit username , password - /oauth/token - returns a token in exchange for a valid authorization code - /verify - verifies token
With the above endpoints, this mock can be used for tests to attain below oauth2 stages

• stage 1 : Authorization code grant - Get access code

- 1 invoke oauth2 dialog end point /oauth/dialog with callback url - 2 redirects to mock auth server login page /login - 3 successful login with mock server redirects to callback url with access

code

• stage 2 : Authentication - Exchange access code for access token

- 4 invoke with access code, /oauth/token to get access token - 5 auth server returns access token, /verify can be used to verify access

token and get user profile

+---------------+                               +--------------+
|               | <---------[1]-------------    | Application  |
| Mock          | Application sends request     |  ^           |
| Authorization | to auth server,payload:       |  |           |
| Server        | {'client_id':,                |  |           |
| (mock-oauth2- |     'callback_url': app url } |  Stage 1     |
| social-app.ts)|                               |  |           |
|               |----+ auth server redirects    |  |           |
|               |    | browser to login page,   |  |           |
|               |  [2] client_id and            |  |           |
|               |    | callback_url are         |  |           |
|               |<---+ passed as hidden params  |  |           |
|               |                               |  |           |
|               |                               |  v           |
|               | -------[3]------------->      | ***          |
|               | login success, auth server    |  ^           |
|               | redirects browser to callback |  |           |
|               | url with access_code          |  |           |
|               |                               |  |           |
|               | <-------------[4]---------    |  |           |
|               |  Application requests access  |  Stage 2     |
|               |  token with access_code       |  |           |
|               |                               |  |           |
|               | ---------------[5]--------->  |  v           |
+---------------+       returns access token    +--------------+