Getting Started

1. Start stubIdP

   npx @cerberauth/stubidp --redirect-uri http://localhost:8080/callback

   The server starts at http://localhost:8484.

   --client-id and --client-secret are optional. When omitted, a human-readable ID (e.g. brave-falcon-3a9f12) and a secure random secret are generated and printed in the startup table.

2. Verify it is running

   curl http://localhost:8484/.well-known/openid-configuration

   You should receive a JSON document with standard OIDC discovery fields.

3. Configure your application

   Point your OAuth 2.0 / OIDC client library at stubIdP:

   Setting	Value
   Issuer / Discovery URL	http://localhost:8484
   Client ID	value printed in startup log
   Client Secret	value printed in startup log
   Authorization endpoint	http://localhost:8484/auth
   Token endpoint	http://localhost:8484/token
   JWKS URI	http://localhost:8484/jwks

4. Log in

   When your app redirects to the authorization endpoint, stubIdP shows a login form. Enter any username and password — all credentials are accepted.

5. Approve scopes

   After login, stubIdP shows a consent screen listing the requested scopes. Click Allow to complete the flow and receive tokens.

Caution

stubIdP accepts any username and password. It is not a real identity provider — use it only in development and testing environments.

Next steps

• Dynamic Client Registration — use stubIdP as a shared OIDC server for teams or multi-service environments
• GitHub Actions — run stubIdP in CI pipelines
• Cloudflare Workers — deploy a globally distributed OIDC server
• Docker — run stubIdP as a container
• Configuration — CLI flags, environment variables, and database options