def test_get_provider_configuration(self): # key/signing stuff federation_key = sym_key() op_root_key = rsa_key() provider_config = self.create_provider_config(op_root_key, federation_key) # provider configuration endpoint responses.add(responses.GET, "{}/.well-known/openid-configuration".format(ISSUER), body=json.dumps(provider_config), status=200, content_type="application/json") rp = RP(None, sym_key(), [], [federation_key], None) provider_config = rp.get_provider_configuration(ISSUER) assert provider_config["issuer"] == ISSUER # value from signed metadata overrides plain value assert provider_config["id_token_signing_alg_values_supported"] == ["RS512"]