Loading…
Simulate and understand OAuth 2.0 authorization flows. Review the result before reusing it in another workflow.
Redirect user to authorization endpoint
User grants permission
Receive authorization code via redirect
Exchange code for access token
Use token to access API
This simulator demonstrates the OAuth 2.0 Authorization Code flow with PKCE. PKCE (Proof Key for Code Exchange) adds an extra layer of security recommended for public clients like mobile apps and SPAs.