How-to: Test your authorization server

[colin-riddell]

What's the best way to test that my implementation of authorization server works for my needs

• Integration testing the authorization server locally using e.g. JUnit. It is possible to write a test with mockMvc calls
• Selenium/Cypress/SoapUI/Postman etc?
• OAuth 2.x conformance suite? Does such a thing exist? Is it proprietary?

Ref: #499

[sjohnr]

Hi @colin-riddell, thanks for the suggestion! Just for clarity for others, could you update the issue and say just a bit more about your suggestion? For example, you may be suggesting a guide for:

1. Integration testing the authorization server locally using e.g. JUnit
2. Building a test suite for end-to-end OAuth flows using an automated testing tool e.g. Selenium/SoapUI/Postman/etc.
3. Other?

[jgrandja]

Related gh-258

[jgrandja]

@colin-riddell

Integration testing the authorization server locally using e.g. JUnit. It is possible to write a test with mockMvc calls

Please see the JUnit integration tests that make use of MockMvc.

We're also considering adding integration test support via gh-258.

I'm going to close this as a duplicate of gh-258.