Beta

Create a tenant

A new tenant starts with its own users, OAuth settings, audit history and logs. You are its first Tenant Admin.

PKCE and state generator

Create the single-use values an authorization request needs: a PKCE code verifier and challenge, state and nonce.

Everything happens in this browser. What you paste is not sent or stored, and leaving the page clears it.

Generate

A verifier has 43 to 128 characters drawn from letters, digits, hyphen, period, underscore and tilde. S256 sends its SHA-256 hash; plain sends the verifier itself and is only for clients that cannot hash.

code_verifier
code_challenge
code_challenge_method
state
nonce

Where each value goes

The authorization request carries the challenge, state and nonce. Keep the verifier in the client, and send it only in the token request, which proves that the client exchanging the code is the one that asked for it.


      

      

    
Check a verifier

      
The verifier your client kept.

      
The challenge from the authorization request, to see whether they match.

      

      

      

        

        



  

    
We value your privacy

    
  

  
We use cookies and similar technologies to enhance your browsing experience, and analytics to understand our traffic. By clicking "Allow all", you consent to optional analytics.
    Cookie Policy

  
  
  

    
    
  




      

      
    

    
      

        Tools