Your files stay on your device

OIDC discovery analyzer

Analyze a pasted OpenID Connect discovery document for weak or contradictory settings like plain PKCE, implicit flow, and issuer mismatches.

Paste a discovery document to grade it.

This page grades the document, not the deployment: advertised behavior is a claim until you test the running endpoints. Fetching the URL for you is also left out on purpose. Server-side fetching of arbitrary URLs is an SSRF primitive, and browser-side fetching fails CORS for most providers, so a local reader with a terminal beats both.
Options

More web & auth tools

- PKCE pair (/web/pkce)
- JWK / JWKS (/web/jwk)
- SAML inspector (/web/saml)
All web & auth tools (/web)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/web/oidc-discovery-analyzer
Markdown version: https://nutter.tools/web/oidc-discovery-analyzer.md
Plain-text version: https://nutter.tools/web/oidc-discovery-analyzer.txt
Agent index: https://nutter.tools/llms.txt