KivTools

OIDC Configuration & PKCE Checker LOCAL ONLY

Review copied OpenID Connect discovery metadata, check common browser-client settings, and generate a fresh S256 PKCE verifier and challenge locally.

This page does not call the identity provider. Paste only metadata, never a production client secret, authorization code, or access token.
Client context Optional values make the local review more specific.
OpenID Connect discovery metadata
PKCE values Generated with Web Crypto in this browser.
Code verifier
Generate a PKCE set to see a local value.
S256 code challenge
Generate a PKCE set to see a local value.
State
Generate a PKCE set to see a local value.
Inspection summary
  • Paste OpenID Connect discovery JSON to inspect it.

Prepare a safer public-client login flow

Use Authorization Code with PKCE for browser and mobile clients. This local checker cannot confirm provider registration, redirect URI allowlists, consent policy, or live token behavior.

Recent tools:

KivTools Navigator