E2E tests

[psrpinto]

This PR adds end-to-end tests for the whole OIDC flow, including logging in and granting "consent".

This is intended to be executed in the developer's machine, and requires https://github.com/Automattic/matrix-oidc-playground/ to be running.

Added some documentation as well.

Output

$ composer test

> cd tests && yarn start
yarn run v1.22.19
$ ts-node-esm index.ts
Server listening at https://localhost:7443/
Discovered issuer https://localhost:8443/ {
  claim_types_supported: [ 'normal' ],
  claims_parameter_supported: false,
  grant_types_supported: [ 'authorization_code', 'implicit' ],
  request_parameter_supported: false,
  request_uri_parameter_supported: true,
  require_request_uri_registration: false,
  response_modes_supported: [ 'query', 'fragment' ],
  token_endpoint_auth_methods_supported: [ 'client_secret_basic' ],
  issuer: 'https://localhost:8443/',
  jwks_uri: 'https://localhost:8443/.well-known/jwks.json',
  authorization_endpoint: 'https://localhost:8443/wp-json/openid-connect/authorize',
  token_endpoint: 'https://localhost:8443/wp-json/openid-connect/token',
  userinfo_endpoint: 'https://localhost:8443/wp-json/openid-connect/userinfo',
  scopes_supported: [ 'openid', 'profile' ],
  response_types_supported: [ 'code' ],
  id_token_signing_alg_values_supported: [ 'RS256' ]
}

request https://localhost:8443/wp-json/openid-connect/authorize?client_id=oidc-server-plugin-tests&scope=openid%20profile&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%3A7443&state=73617bd67ee28358b02ab77a5c38758e&nonce=7926217c4ad37e6db5cc8e6f78a421ed

response 302 https://localhost:8443/wp-json/openid-connect/authorize?client_id=oidc-server-plugin-tests&scope=openid%20profile&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%3A7443&state=73617bd67ee28358b02ab77a5c38758e&nonce=7926217c4ad37e6db5cc8e6f78a421ed

request https://localhost:8443/wp-login.php?client_id=oidc-server-plugin-tests&scope=openid%20profile&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%3A7443&state=73617bd67ee28358b02ab77a5c38758e&nonce=7926217c4ad37e6db5cc8e6f78a421ed&action=openid-authenticate

response 302 https://localhost:8443/wp-login.php?client_id=oidc-server-plugin-tests&scope=openid%20profile&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%3A7443&state=73617bd67ee28358b02ab77a5c38758e&nonce=7926217c4ad37e6db5cc8e6f78a421ed&action=openid-authenticate

request https://localhost:8443/wp-login.php?redirect_to=https%3A%2F%2Flocalhost%3A8443%2Fwp-login.php%3Fclient_id%3Doidc-server-plugin-tests%26scope%3Dopenid%2520profile%26response_type%3Dcode%26redirect_uri%3Dhttps%253A%252F%252Flocalhost%253A7443%26state%3D73617bd67ee28358b02ab77a5c38758e%26nonce%3D7926217c4ad37e6db5cc8e6f78a421ed%26action%3Dopenid-authenticate&reauth=1

response 200 https://localhost:8443/wp-login.php?redirect_to=https%3A%2F%2Flocalhost%3A8443%2Fwp-login.php%3Fclient_id%3Doidc-server-plugin-tests%26scope%3Dopenid%2520profile%26response_type%3Dcode%26redirect_uri%3Dhttps%253A%252F%252Flocalhost%253A7443%26state%3D73617bd67ee28358b02ab77a5c38758e%26nonce%3D7926217c4ad37e6db5cc8e6f78a421ed%26action%3Dopenid-authenticate&reauth=1

request https://localhost:8443/wp-login.php FormData {
  [Symbol(state)]: [
    { name: 'testcookie', value: '1' },
    { name: 'log', value: 'admin' },
    { name: 'pwd', value: 'password' },
    {
      name: 'redirect_to',
      value: 'https://localhost:8443/wp-login.php?client_id=oidc-server-plugin-tests&scope=openid%20profile&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%3A7443&state=73617bd67ee28358b02ab77a5c38758e&nonce=7926217c4ad37e6db5cc8e6f78a421ed&action=openid-authenticate'
    }
  ]
}

response 302 https://localhost:8443/wp-login.php

request https://localhost:8443/wp-login.php?client_id=oidc-server-plugin-tests&scope=openid%20profile&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%3A7443&state=73617bd67ee28358b02ab77a5c38758e&nonce=7926217c4ad37e6db5cc8e6f78a421ed&action=openid-authenticate

response 302 https://localhost:8443/wp-login.php?client_id=oidc-server-plugin-tests&scope=openid%20profile&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%3A7443&state=73617bd67ee28358b02ab77a5c38758e&nonce=7926217c4ad37e6db5cc8e6f78a421ed&action=openid-authenticate

request https://localhost:8443/wp-json/openid-connect/authorize?_wpnonce=897e20d432&client_id=oidc-server-plugin-tests&scope=openid%20profile&response_type=code&redirect_uri=https://localhost:7443&state=73617bd67ee28358b02ab77a5c38758e&nonce=7926217c4ad37e6db5cc8e6f78a421ed&action=openid-authenticate

response 302 https://localhost:8443/wp-json/openid-connect/authorize?_wpnonce=897e20d432&client_id=oidc-server-plugin-tests&scope=openid%20profile&response_type=code&redirect_uri=https://localhost:7443&state=73617bd67ee28358b02ab77a5c38758e&nonce=7926217c4ad37e6db5cc8e6f78a421ed&action=openid-authenticate

request https://localhost:7443?code=e31f684979e728520301922fd4075a26751088a4&state=73617bd67ee28358b02ab77a5c38758e

response 200 https://localhost:7443?code=e31f684979e728520301922fd4075a26751088a4&state=73617bd67ee28358b02ab77a5c38758e

JWT token {
  iss: 'https://localhost:8443/',
  sub: 'admin',
  aud: 'oidc-server-plugin-tests',
  iat: 1695316090,
  exp: 1695319690,
  auth_time: 1695316090,
  nonce: '7926217c4ad37e6db5cc8e6f78a421ed'
}
userinfo {
  scope: 'openid profile',
  username: 'admin',
  name: 'admin',
  nickname: 'admin',
  picture: 'https://secure.gravatar.com/avatar/e64c7d89f26bd1972efa854d13d7dd61?s=96&d=mm&r=g',
  sub: 'admin'
}
✨  Done in 2.79s.