Your files stay on your device

# OIDC discovery analyzer

Analyze a pasted OpenID Connect discovery document for weak or contradictory settings like plain PKCE, implicit flow, and issuer mismatches.

Paste a discovery document to grade it.

This page grades the document, not the deployment: advertised behavior is a claim until you test the running endpoints. Fetching the URL for you is also left out on purpose. Server-side fetching of arbitrary URLs is an SSRF primitive, and browser-side fetching fails CORS for most providers, so a local reader with a terminal beats both.
Options

## More web & auth tools

- [PKCE pair](/web/pkce)
- [JWK / JWKS](/web/jwk)
- [SAML inspector](/web/saml)
[All web & auth tools](/web)

Was this tool useful?
YesNo

---

Canonical HTML: https://nutter.tools/web/oidc-discovery-analyzer
Markdown version: https://nutter.tools/web/oidc-discovery-analyzer.md
Plain-text version: https://nutter.tools/web/oidc-discovery-analyzer.txt
Agent index: https://nutter.tools/llms.txt