OIDC Configuration & PKCE Checker

Inspect copied OpenID Connect discovery metadata for public-client issues and generate S256 PKCE verifier, challenge, and state values in the browser.

Runs locally in your browser

This page does not call the identity provider. Paste only metadata, never a production client secret, authorization code, or access token.

Client context Optional values make the local review more specific.

Client ID

Redirect URI

OpenID Connect discovery metadata

PKCE values Generated with Web Crypto in this browser.

Code verifier: Generate a PKCE set to see a local value.
S256 code challenge: Generate a PKCE set to see a local value.
State: Generate a PKCE set to see a local value.

Inspection summary

Paste OpenID Connect discovery JSON to inspect it.

Prepare a safer public-client sign-in flow

Use Authorization Code with PKCE for browser and mobile clients. This local checker cannot confirm provider registration, redirect URI allowlists, consent policy, or live token behavior.