{"id":50341461,"url":"https://github.com/hectorm/simpleidp","last_synced_at":"2026-05-29T17:30:38.393Z","repository":{"id":355506990,"uuid":"1228290042","full_name":"hectorm/simpleidp","owner":"hectorm","description":"Minimal OIDC Identity Provider for testing.","archived":false,"fork":false,"pushed_at":"2026-05-03T23:38:36.000Z","size":71,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"master","last_synced_at":"2026-05-04T01:25:53.797Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hectorm.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"hectorm","custom":"https://hector.molinero.dev/donate"}},"created_at":"2026-05-03T20:54:19.000Z","updated_at":"2026-05-03T23:38:39.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/hectorm/simpleidp","commit_stats":null,"previous_names":["hectorm/simpleidp"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/hectorm/simpleidp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hectorm%2Fsimpleidp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hectorm%2Fsimpleidp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hectorm%2Fsimpleidp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hectorm%2Fsimpleidp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hectorm","download_url":"https://codeload.github.com/hectorm/simpleidp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hectorm%2Fsimpleidp/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33664259,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-05-29T02:00:06.066Z","response_time":107,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-05-29T17:30:37.146Z","updated_at":"2026-05-29T17:30:38.381Z","avatar_url":"https://github.com/hectorm.png","language":"Go","funding_links":["https://github.com/sponsors/hectorm","https://hector.molinero.dev/donate"],"categories":[],"sub_categories":[],"readme":"# Simple IdP\n\nMinimal OIDC Identity Provider that implements the Authorization Code flow with PKCE.\n\n## Why\n\nI need an IdP for local development and integration testing. Keycloak is more than capable, but too complex for this specific use case, and Dex, while lighter, doesn't implement everything I need for testing. So, with the help of an LLM, I've developed this simple IdP. This isn't strictly \"vibe-coded\" because I at least guided and verified the low-level implementation, but naturally, this shouldn't be used for any production purposes. It was developed solely to address a use case of my own. If you find this useful, go ahead and use it, but I consider this finished unless I find a bug or need to extend the implementation.\n\n## Configuration\n\nAll configuration is done through environment variables. At least one client and one user must be configured.\n\n### General\n\n| Variable              | Description                                                      |\n| --------------------- | ---------------------------------------------------------------- |\n| `SIMPLE_IDP_LISTEN`   | Listen address (default `:8227`)                                 |\n| `SIMPLE_IDP_ISSUER`   | Issuer URL as seen by clients (required)                         |\n| `SIMPLE_IDP_TITLE`    | Login page title (default `Simple IdP`)                          |\n| `SIMPLE_IDP_KEY_ID`   | JWKS key ID (default `simple-idp`)                               |\n| `SIMPLE_IDP_KEY_FILE` | PEM file for PKCS8 RSA private key; generated in memory if empty |\n| `SIMPLE_IDP_KEY_B64`  | Base64-encoded PKCS8 RSA private key (alternative to `KEY_FILE`) |\n\n### Clients\n\nClients are configured with a label prefix. The label is arbitrary and only used for grouping.\n\n| Variable                                                        | Description                                               |\n| --------------------------------------------------------------- | --------------------------------------------------------- |\n| `SIMPLE_IDP_CLIENT_\u003cLABEL\u003e_ID`                                  | Client ID                                                 |\n| `SIMPLE_IDP_CLIENT_\u003cLABEL\u003e_SECRET`                              | Client secret (optional for loopback/native clients)      |\n| `SIMPLE_IDP_CLIENT_\u003cLABEL\u003e_REDIRECT_URL`                        | Allowed redirect URI                                      |\n| `SIMPLE_IDP_CLIENT_\u003cLABEL\u003e_POST_LOGOUT_REDIRECT_URL`            | Allowed post-logout redirect URI (optional)               |\n| `SIMPLE_IDP_CLIENT_\u003cLABEL\u003e_BACKCHANNEL_LOGOUT_URI`              | Back-channel logout URI (optional)                        |\n| `SIMPLE_IDP_CLIENT_\u003cLABEL\u003e_BACKCHANNEL_LOGOUT_SESSION_REQUIRED` | Require `sid` in logout token (optional, default `false`) |\n\n### Users\n\nUsers are configured the same way as clients, with a label prefix.\n\n| Variable                                     | Description                                        |\n| -------------------------------------------- | -------------------------------------------------- |\n| `SIMPLE_IDP_USER_\u003cLABEL\u003e_USERNAME`           | Login username (required)                          |\n| `SIMPLE_IDP_USER_\u003cLABEL\u003e_PASSWORD`           | Login password (required)                          |\n| `SIMPLE_IDP_USER_\u003cLABEL\u003e_SUB`                | `sub` claim (default: `\u003cUSERNAME\u003e`)                |\n| `SIMPLE_IDP_USER_\u003cLABEL\u003e_NAME`               | `name` claim (default: `\u003cUSERNAME\u003e`)               |\n| `SIMPLE_IDP_USER_\u003cLABEL\u003e_PREFERRED_USERNAME` | `preferred_username` claim (default: `\u003cUSERNAME\u003e`) |\n| `SIMPLE_IDP_USER_\u003cLABEL\u003e_EMAIL`              | `email` claim (default: `\u003cUSERNAME\u003e@localhost`)    |\n| `SIMPLE_IDP_USER_\u003cLABEL\u003e_EMAIL_VERIFIED`     | `email_verified` claim (default: `true`)           |\n| `SIMPLE_IDP_USER_\u003cLABEL\u003e_PROFILE`            | `profile` claim (default: empty)                   |\n| `SIMPLE_IDP_USER_\u003cLABEL\u003e_PICTURE`            | `picture` claim (default: empty)                   |\n| `SIMPLE_IDP_USER_\u003cLABEL\u003e_LOCALE`             | `locale` claim (default: empty)                    |\n| `SIMPLE_IDP_USER_\u003cLABEL\u003e_GROUPS`             | Comma-separated `groups` claim (default: empty)    |\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhectorm%2Fsimpleidp","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhectorm%2Fsimpleidp","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhectorm%2Fsimpleidp/lists"}