identity-testing-patterns
Testing patterns for IdentityServer-based systems including integration testing with WebApplicationFactory, mock token issuance, test authority configuration, protocol response validation, and end-to-end authentication flow testing.
Install
With your agent
Install OMGSkills skill "duendesoftware/duende-skills:skills/identity-testing-patterns" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/identity-testing-patterns ~/.claude/skills/identity-testing-patternsFrom README
Identity Testing Patterns When to Use This Skill Use this skill when: Writing integration tests for applications that issue or validate tokens using Duende IdentityServer Hosting IdentityServer in-memory with WebApplicationFactory to test grant flows end-to-end Creating mock JWT tokens for testing protected APIs without a live authority Testing custom IProfileService implementations or claim transformation logic Verifying IAuthorizationHandler and policy-based authorization against specific claim sets Testing BFF endpoints that rely on cookie-based sessions and proxied API calls Scaffolding an integration-test project from the duende-is-inmem template to test IdentityServer itself Running a post-deployment login-flow smoke test without a headless browser Core Principles Integration over unit — Test token issuance, claim mapping, and policy enforcement against a real (in-process) IdentityServer instance.
More from this repo
aspnetcore-authentication
ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
aspnetcore-authorization
ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
claims-authorization
Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation,...