Fetch bounded public OpenID Connect discovery metadata and JWKS, review provider configuration, verify a pasted JWT locally, validate important claims and generate PKCE, state and nonce values.
HTTPS only; private, loopback and local-network targets are blocked.
Discovery is limited to 512 KB, JWKS to 1 MB, three redirects and a short timeout.
Generate a fresh S256 verifier/challenge, state and nonce for development testing. Do not reuse them.
Inspect provider metadata, verify JWTs locally and generate PKCE material. Fetch bounded public OpenID Connect discovery metadata and JWKS, review provider configuration, verify a pasted JWT locally, validate important claims and generate PKCE, state and nonce values.
Yes. OAuth & OIDC Debugger opens in a modern browser and does not require desktop software installation.
Common use cases include Validate an OIDC provider while integrating sign-in; Explain signature, key-selection and important claim failures.
Some OAuth & OIDC Debugger features need to connect to a target service or load online data. Follow the page guidance and access only resources you are authorized to use.
0 comments
Sign in to comment and reply.
