OAuth 2.0 Authorization URL Builder

OAuth 2.0 Authorization URL Builder

Assembling an OAuth 2.0 authorization request by hand is fiddly: every parameter has to be percent-encoded exactly, the PKCE code_challenge has to be a base64url-encoded SHA-256 hash of a random verifier, and the state und nonce values need to be unpredictable. Get one character wrong and the provider bounces you with an opaque error. This builder produces a correct, ready-to-use authorization URL from a few inputs — entirely in your browser, so secrets never leave the page.

Nutzung

1. Pick a provider preset (Google, GitHub, Microsoft, Okta) to auto-fill the authorization endpoint and suggested scopes, or choose Custom and paste your own endpoint.
2. Geben Sie Ihr client_id und das redirect_uri registered with the provider.
3. Choose a response type — code (with PKCE) is recommended for almost every modern app.
4. Leave PKCE and state enabled, add a nonce if you request an ID token, and add any extra parameters such as access_type=offline.
5. Klicken Sie auf Build URL, then copy the generated authorization URL. If PKCE is on, also copy the code_verifier and keep it for the token exchange.

Funktionen

• Provider presets – Google, GitHub, Microsoft (Entra) and Okta endpoints and scopes are filled in for you, with a Custom option for any other server.
• PKCE generation – creates a cryptographically random code_verifier and the matching S256 code_challenge using the Web Crypto API, per RFC 7636.
• State and nonce – one-click generation of unpredictable CSRF and OpenID Connect replay-protection values.
• Precise encoding – every parameter is percent-encoded to RFC 3986, with spaces rendered as %20.
• Decoded breakdown – see each query parameter and its plain value so you can verify the URL at a glance.
• Vollständig clientseitig – nothing is sent to a server; your client secrets and verifier stay in the browser.