Auth Playground is a playground 🎮 to help you to get all authentication codes and tokens during development 🧑💻. We do not save any token or code which you received to be sure about that 🔐, you can check 👁 our opensource Github Repository 📖. You are also welcome to contribute to this project.
We would love ❤️ if you contribute 🧑💻 to this project. You can for example add a new authentication provider 🏢, fix some issues 🔴 which you found or do something else.
- Enter this URL:
https://zitadel.domain.tld/oauth/v2/authorize?response_type=code&client_id=<client-id>&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Fapp%2Fcallback&scope=openid%20profile%20email%20offlice_access&code_challenge=<code-challenge>&code_challenge_method=S256 - enter your user credentials (login with your user)
- Copy the code you got in your callback url
Run this curl to get your id_token:
curl -X POST "https://zitadel.domain.tld/oauth/v2/token" \
-H "Content-Type: application/x-www-form-urlencoded" \
-d "grant_type=authorization_code" \
-d "code=$AUTH_CODE" \
-d "redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Fapp%2Fcallback" \
-d "client_id=<your-client-id>" \
-d "code_verifier=ThisIsMyCodeChallenge123"#!/bin/bash
# Set your variables here
CLIENT_ID="<your-client-id"
REDIRECT_URI="http://localhost:3000/app/callback"
AUTH_CODE="<your-auth-code>" # Replace with the actual authorization code
CODE_VERIFIER="ThisIsMyCodeChallenge123" # Replace with your actual code verifier
TOKEN_ENDPOINT="https://zitadel.domain.tld/oauth/v2/token"
# Function to generate code_challenge from code_verifier
generate_code_challenge() {
local code_verifier=$1
# Create a SHA-256 hash of the code_verifier
local hashed_code_verifier=$(echo -n "$code_verifier" | openssl dgst -sha256 -binary)
# Base64 URL encode the hashed code verifier
local code_challenge=$(echo -n "$hashed_code_verifier" | base64 | tr '+/' '-_' | tr -d '=')
echo "$code_challenge"
}
# Generate the code_challenge
CODE_CHALLENGE=$(generate_code_challenge "$CODE_VERIFIER")
# Print the code_challenge (for debugging purposes)
echo "Generated Code Challenge: $CODE_CHALLENGE"
# Exchange the authorization code for tokens
response=$(curl -X POST "$TOKEN_ENDPOINT" \
-H "Content-Type: application/x-www-form-urlencoded" \
-d "grant_type=authorization_code" \
-d "code=$AUTH_CODE" \
-d "redirect_uri=$REDIRECT_URI" \
-d "client_id=$CLIENT_ID" \
-d "code_verifier=$CODE_VERIFIER")
# Print the response (for debugging purposes)
echo "Token Response: $response"