Mock OAuth provider

Test sign in with synthetic users, real protocol responses and controlled failures. No external identity account needed.

Claim presetGeneric test claims only. Every choice uses the same socket.help test page, without real brand logos or identity accounts.Provider name

Allowed redirect URLs

One exact URL per line. HTTPS, or HTTP on localhost.Test users

JSON users with sub, email, name and optional claims. Use synthetic data.Shared custom claims

A JSON object. Protocol and identity fields cannot be overridden.Failure scenarioAllow headless test approval with login_hint

Public test endpoints. Configuration and request logs stay in your workspace. Free includes 1 provider, Pro 10 and Team 50. Starts with one hour of retention.

A test identity service

Set your callback URL and test users, then create the provider to get an issuer and client credentials.

Supports authorization code with S256 PKCE, client credentials and rotating refresh tokens. The hosted approval page always identifies itself as a socket.help test provider.

Read the OAuth testing guide

About Mock OAuth provider

Test OAuth 2.0 and OpenID Connect sign in without registering a real identity account. Each workspace provider has its own issuer, discovery document, RS256 signing key and synthetic users.

When to use it

Test your sign in callback, PKCE validation and expired token handling without an external identity account.

Mock OAuth provider example

POST /api/oauth-providers
{"name":"Test app","redirectUris":["http://localhost:3000/auth/callback"],"users":[{"sub":"test-user","email":"[email protected]","name":"Alex"}]}

GET {issuer}/.well-known/openid-configuration

How to use it

Choose generic, Google-style, GitHub-style, Okta-style or Auth0-style claims, then register exact callback URLs and synthetic users. These presets never impersonate a real identity service.
Create the provider and save its client secret. Configure your client with the discovery URL and S256 PKCE.
Approve or deny on the hosted test page. Headless prompt=none with login_hint redirects immediately only to loopback callbacks; public destinations require Continue.
Switch failure scenarios, inspect requests and delete the provider when testing is complete.

Limits & privacy

Free allows 1 active provider, Pro 10 and Team 50. Mock retention and workspace storage limits apply. Codes last 60 seconds, access and ID tokens 5 minutes, refresh tokens 1 hour. Refresh tokens rotate on use. Each provider accepts 120 requests per minute and keeps its last 100 calls with sensitive parameters redacted. Use synthetic data only. This is a test service, never a source of real account identity.

Use this tool from the API reference or connect through the SDK, CLI, SSH, or MCP. Hosted calls share your plan allowances.