Sign in to Auth examples
Sign in with your Rhezar account to continue
Designated test identities
Outside production you can sign in as a designated test identity in two steps: open one below to sign in to the account webapp as it (press “Sign in with Test Account” there), then come back here and press “Sign in with Rhezar”, which account approves at once.
- test@rhezar.comThe default test identity.
- test+auth-examples-owner@rhezar.comAn identity to create and own a tenant with.
- test+auth-examples-member@rhezar.comAn identity to grant a role in another identity's tenant to.
What this teaches: The OAuth consumer flow. This webapp is an OAuth client of the account webapp: the button sends the browser to this webapp's /api/auth/start, which redirects to account's authorize URL with a signed state; account authenticates you and returns a code to /api/auth/callback, which exchanges it with identity server to server and keeps the tokens in httpOnly cookies on this host. The browser never holds a token and never calls identity. Outside production, the designated test identities sign in through account's test login instead of a provider.