Skip to content

docs(reference-app): collapse the walkthrough behind a disclosure #196

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ardetrick merged 1 commit into from
Jul 26, 2026
Merged

docs(reference-app): collapse the walkthrough behind a disclosure #196

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 14 additions & 7 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -244,26 +244,33 @@ jwk [like this](https://jwt.io/#debugger-io?token=eyJhbGciOiJSUzI1NiIsImtpZCI6Im

## See it work

A walk through the authorization code flow with OpenID Connect, from login to real
tokens. Run `./gradlew bootTestRun` and open http://localhost:8080 to click through it
yourself.
Log in, authorize the requested scopes, and the app exchanges the authorization code for
real tokens from Hydra. Run `./gradlew bootTestRun` and open http://localhost:8080 to
click through it yourself.

Log in (the demo credentials are pre-filled):
![consent screen](docs/images/authorization-code-flow/2-consent.png)

<details>
<summary>See the full flow, step by step</summary>

Log in — the demo credentials are pre-filled.

![login screen](docs/images/authorization-code-flow/1-login.png)

Authorize the scopes the application is requesting:
Authorize the scopes the application is requesting.

![consent screen](docs/images/authorization-code-flow/2-consent.png)

Hydra redirects back with an authorization code, which the app exchanges for tokens:
Hydra redirects back with an authorization code, which the app exchanges for tokens.

![callback screen](docs/images/authorization-code-flow/3-callback-page.png)

The result is a real access token, ID token, and refresh token from Hydra:
The result is a real access token, ID token, and refresh token from Hydra.

![token response](docs/images/authorization-code-flow/4-tokens.png)

</details>

## Building against a different testcontainers-ory-hydra version

The `testcontainersOryHydraVersion` Gradle property overrides the version pinned in
Expand Down