trusted-server/crates/integration-tests/fixtures/configs/viceroy-template.toml at d3e9f0892e7efe86f202abcb010340e8f37edcad · IABTechLab/trusted-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
# Viceroy local server configuration template for integration tests.
# This configures the Viceroy runtime itself (backends, KV stores, etc.),
# separate from the application config (trusted-server.toml).

[local_server]

    [local_server.backends]

    [local_server.kv_stores]
        # These inline placeholders satisfy Viceroy's local KV configuration
        # requirements without exercising KV-backed application behavior.
        [[local_server.kv_stores.counter_store]]
            key = "placeholder"
            data = "placeholder"

        [[local_server.kv_stores.opid_store]]
            key = "placeholder"
            data = "placeholder"

        [[local_server.kv_stores.creative_store]]
            key = "placeholder"
            data = "placeholder"

        [[local_server.kv_stores.consent_store]]
            key = "placeholder"
            data = "placeholder"

        [[local_server.kv_stores.ec_identity_store]]
            key = "placeholder"
            data = "placeholder"

        [[local_server.kv_stores.ec_partner_store]]
            key = "placeholder"
            data = "placeholder"

    # These are generated test-only key pairs, not production credentials.
    # The Ed25519 private key (data) and its matching public key (x in jwks_store below)
    # exist solely for signing and verifying tokens in the integration test environment.
    # They were generated specifically for testing and are safe to commit — they
    # have never been used in any production or staging environment.
    [local_server.secret_stores]
        [[local_server.secret_stores.signing_keys]]
            key = "ts-2025-10-A"
            data = "NVnTYrw5xoyTJDOwoUWoPJO3A6UCCXOJJUzgGTxxx7k="

        [[local_server.secret_stores.api-keys]]
            key = "api_key"
            data = "test-api-key"

    [local_server.config_stores]
        [local_server.config_stores.jwks_store]
            format = "inline-toml"
        [local_server.config_stores.jwks_store.contents]
            ts-2025-10-A = "{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"kid\":\"ts-2025-10-A\",\"use\":\"sig\",\"x\":\"UVTi04QLrIuB7jXpVfHjUTVN5aIdcbPNr50umTtN8pw\"}"
            ts-2025-10-B = "{\"kty\":\"OKP\",\"crv\":\"Ed25519\",\"kid\":\"ts-2025-10-B\",\"use\":\"sig\",\"x\":\"HVTi04QLrIuB7jXpVfHjUTVN5aIdcbPNr50umTtN8pw\"}"
            current-kid = "ts-2025-10-A"
            active-kids = "ts-2025-10-A,ts-2025-10-B"