Aller au contenu principal
Version 0.1Brouillon

Testing and tooling

Who this is for

Developers and testers validating an integration against UAT before go-live. Nothing here touches production or real users.

Overview​

The tools and environments LuxID provides to build, validate, and test your integration before going live.

This section covers the tools and environments LuxID provides to help you build, validate, and test your integration before going live.

Whether you are working on a first prototype or running regression checks before a release, these resources let you iterate quickly and catch issues early - without touching production data or real users.

In this section​

01. Sandbox environment​

The LuxID UAT environment (login-uat.luxid.lu) mirrors the production protocol surface but operates with isolated test users and separate credentials. Covers what differs from production, rate limits, test data lifecycle, and how to promote your configuration to production when you are ready.

02. Token debugger​

A LuxID-provided web tool for pasting and inspecting ID Tokens and Access Tokens. Decodes the header and payload, validates the signature against the LuxID JWKS, and surfaces expiry, audience, issuer, acr, and amr values in a structured view. Also covers offline alternatives for developers who prefer to work locally.

A tool with LuxID for rendering the exact consent screen your application will show to users - before any real user ever sees it. Lets you choose an application, a test user, and a target language, then previews the consent dialogue as it would appear, including claim labels, your application's logo, name, and description.

04. Attribute preview tool​

Shows, for a given test user and application, the exact set of claims that would be included in the ID Token - combining the Application's Claim Template, granted consents, and the user's actual attributes. Use this before go-live to confirm that critical claims such as phone_number or luxid_verified will be present.

05. API explorer and Postman collections​

Ready-made Postman collections and an OpenAPI specification covering the full LuxID token flow: Authorization Code + PKCE, token refresh, UserInfo, introspection, and revocation. Includes setup instructions, Insomnia and Bruno equivalents, and a bash + jq smoke-test script for CI pipelines.

Where to start​

If you are new to the LuxID integration:

  1. Request UAT credentials via LuxID - see Environments.
  2. Import the Postman collection from API explorer and Postman collections and run the Authorization Code + PKCE walk-through against UAT.
  3. Use the Token debugger to inspect the tokens you receive.
  4. Use the Attribute preview tool to confirm your claim configuration is correct.
  5. Use the Consent simulator to review the consent screen in each supported language.
  6. When everything looks correct, promote to production via LuxID.
Mise à jour le 2026-05-22
Sur cette page