oauth2-test-server 0.2.2

A fast, fully configurable, in-memory OAuth 2.0 + OpenID Connect authorization server for testing, zero-HTTP mode and DCR support for testing auth flow in MCP Servers and MCP Clients
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

use axum::{extract::State, http::StatusCode, response::IntoResponse, Json};

use crate::store::AppState;

/// `GET /.well-known/openid-configuration` — OIDC Discovery document.
pub async fn well_known_openid_configuration(State(state): State<AppState>) -> impl IntoResponse {
    let discovery = state.config.to_discovery_document(state.base_url.clone());
    (StatusCode::OK, Json(discovery))
}

/// `GET /.well-known/jwks.json` — Public keys for JWT validation.
pub async fn jwks(State(state): State<AppState>) -> impl IntoResponse {
    (StatusCode::OK, Json((*state.jwks_json).clone()))
}

/// `GET /error` — Human-readable OAuth error page.
pub async fn error_page(
    axum::extract::Query(params): axum::extract::Query<std::collections::HashMap<String, String>>,
) -> axum::response::Html<String> {
    let error = params.get("error").map(|s| s.as_str()).unwrap_or("unknown");
    let description = params
        .get("error_description")
        .map(|s| s.as_str())
        .unwrap_or("");
    axum::response::Html(format!("<h1>OAuth Error: {error}</h1><p>{description}</p>"))
}