1
Client Configuration
2
Authorization Request
The client generates a state and PKCE challenge, then redirects the user to the Authorization Server.
Waiting for generation...
3
Token Exchange
The Authorization Server redirects back with a code. The client exchanges it for tokens.
Waiting for auth code...
↻
Refresh Token
Flow Sequence
Token Response
No Access Token