OIDC & OAuth 2.0 Playground

Interactively build and test RFC 7636 PKCE authorization requests, decode and verify privacy-preserving pairwise ID tokens, and query live OpenID Provider discovery configurations.

OAuth 2.0 Request Parameters

Client ID *

Redirect URI *

Requested Scopes

openid profile email phone offline

PKCE Security Parameters (RFC 7636)

Code Verifier (Saved locally by client app)

Code Challenge (SHA-256 Base64URL)

State Parameter (CSRF Mitigation)

Live Authorization URL

This is the URL your application directs the user's browser to when initiating the Startum Single Sign-On flow.

Generating...

Tip: Clicking "Launch Flow" will open the real Startum OAuth consent screen in a new window with your configured scopes.

JWT Token & Claims Inspector

            Paste any Startum id_token or access_token to inspect its cryptographic header, pairwise pseudonym claims, and expiration details.
          
          eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InN0YXJ0dW0ta2V5LTIwMjYifQ.eyJpc3MiOiJodHRwczovL3N0YXJ0dW0uY2xvdWQiLCJzdWIiOiJwd183ZTE5YTRiMDhmNGMzOTEyZGE2MWJiMGU0MzkyODFhNSIsImF1ZCI6ImRlbW9fY2xpZW50X3N0YXJ0dW1fMjAyNiIsImV4cCI6MTc5MDc3MDY0MiwiaWF0IjoxNzkwNzY3MDQyLCJhdXRoX3RpbWUiOjE3OTA3NjcwNDIsIm5vbmNlIjoicGctbm9uY2UtMzc0MjkiLCJuYW1lIjoiQWxleCBSaXZlciIsImVtYWlsIjoiYWxleC5yaXZlckBleGFtcGxlLmNvbSIsImVtYWlsX3ZlcmlmaWVkIjp0cnVlLCJhdF9oYXNoIjoiOV9lUXBMXzY1dloxbzNzOSJ9.MEQCID3Q7kZ9sK0m17Wq9N8mock_signature_startum_2026
        
              Token Header (JOSE)
            
              Claims Payload (Claims Set)

OpenID Provider Discovery & Cryptographic Keys

Standard OIDC Discovery specification (RFC 8414 / OIDC Core 1.0) and RS256 public key verification set.

.well-known/openid-configuration JSON Metadata

Click "Fetch Discovery Document" above to query live endpoints...

.well-known/jwks.json RSA Public Keys

Click "Fetch JWKS Public Keys" above to inspect active verification keys...