OIDC Demo Client
Home
Flows
Implicit flow (fragment)
Implicit flow (form post)
Authorization code flow
Authorization code flow + PKCE
Client credentials flow
Refresh tokens
Combining the flows
Tools
Use an access token
Token introspection
Token revocation
OAuth URL Inspector
Back-channel log
Base64 encode/decode
Hash calculator
at_hash calculator
Symmetric signed token generator
Asymmetric signed token generator
Sign with your own key
PEM to JWK converter
Login
OpenID Connect login
External OIDC login
Local login
Authorization code flow
Construct a login link using the authorization code flow.
Create the login link
response_type
What do I want to get back?
code
means authorization code
client_id
The client identifier
scope
What do I want to have access to? Can be any of
openid email profile phone address employee_info api payment
. The
openid
scope is required.
prompt
Should the authorization server prompt me to reauthenticate and consent again? Options:
none, login, consent, select_account
.
state
Opaque value used to maintain state between the request and the callback.
nonce
Value used to associate a client session with an ID token, and to mitigate replay attacks.
response_mode
Send the token response as a form post instead of a fragment encoded redirect.
redirect_uri
Where the authorization server sends the browser back to after login.
Create login link