OAuth PKCE Workbench

Generate, verify, and assemble PKCE authorization inputs locally without sending requests.

Protocol construction only: this page never navigates to the authorization URL, exchanges an authorization code, validates an identity, stores values, or contacts an authorization server. Treat verifier, state, nonce, and callback codes as sensitive; clear them after use and do not paste them into logs, tickets, or chat.

PKCE material

Generated verifier length (43–128)

Challenge method

Verification method

Code verifier

Computed code challenge

Challenge to verify against the current verifier

Reveal verifier on this screen

Authorization URL

Authorization endpoint

Client ID

Redirect URI

Scopes (space-separated)

State

Nonce (optional)

Optional custom parameters (one name=value per line)

Reserved parameters cannot be overridden: client_id, redirect_uri, response_type, scope, state, nonce, code_challenge, and code_challenge_method.

Build an authorization URL.

Callback query parser

Callback URL or query string

No callback parsed.

The parser reports parameters and state comparison only. It never redeems code, follows links, or interprets tokens.