Authorization request builder

Build an OAuth 2.0 or OpenID Connect authorization request one parameter at a time, or paste an existing one to read it back.

Everything happens in this browser. What you paste is not sent or stored, and leaving the page clears it.

The builder only writes the URL. Opening it sends you to the provider, just as a client would.

Start from an existing request

Authorization request URL

Paste a full URL to load its parameters into the form below.

Provider and client Authorization endpoint

From the provider's discovery document, for example https://login.example.test/authorize.

client_id redirect_uri

Must exactly match a redirect URI registered for the client.

What to ask for response_type

code with PKCE is the recommended flow. Types that include token return tokens through the browser.

scope

Space-separated. openid makes it an OpenID Connect request.

response_mode

Protection

state ties the response to this browser, nonce ties an ID token to this request, and PKCE ties the code to the client that asked for it.

statenonce code_challenge code_challenge_method

prompt

none login consent select_account

login_hint max_age

Seconds since the user last authenticated before they must sign in again.

acr_values

Requested authentication context classes, space-separated.

ui_locales

Preferred languages, such as en-GB fr.

resource

One absolute URI per line: the APIs the token is for (RFC 8707).

authorization_details

A JSON array for rich authorization requests (RFC 9396).

Other parameters

One name=value per line, for parameters the form does not cover.