mockidp

Overview ¶

Command mockidp is a demo OIDC issuer standing in for Okta/Entra/Keycloak: it serves discovery + JWKS and mints signed JWTs at GET /token. DEMO ONLY: /token hands a token to anyone. halo-kong / halo-proxy verify these tokens exactly as they would a real IdP's, so client-supplied headers never matter.

curl 'localhost:8081/token?user=alice@acme.com&groups=ai-platform,eng'

It also serves an interactive authorization-code login for halo-server's console (make demo): GET /authorize without user= shows a demo-user picker; with user= it auto-approves that user. PUBLIC_URL, when set, is the browser-facing base advertised as authorization_endpoint, while the issuer, token and JWKS endpoints stay on ISSUER (the in-network name).