SSO demo
A complete integration in one file: sign in, watch the session, call the API, sign out everywhere. Nothing here is a mock — every button makes a real request to the server you name below.
This page is the client, not the server. Register its URL as a redirect URI on your client:
a registration that names a different URI refuses this one, and without a registration the
sign-in form cannot deliver the code back here.
Configuration
Empty means PKCE, which is what a page like this should use.
This page's own address. Register it on the client.
Authentication
Not signed in
Session
Polling tells this page when the session ends somewhere else — another tab, another device, an administrator revoking it. That is what makes single sign-out visible.
Not monitoring
Last checked: never
API
What an application does with the token once it has one.