JWT Token Test

Test OAuth 2.0 JWT token generation and refresh functionality

Client Selection & Credentials
Development Mode: Client secrets are auto-filled for testing convenience. In production, client secrets should never be exposed in the frontend.
Select a client to continue...
Token Response

Token response will appear here...

OAuth 2.0 Quick Reference
Client Credentials Flow
  • Used for server-to-server authentication
  • No user context (subject)
  • Scopes are limited to client's allowed scopes
  • Refresh token optional (depends on client settings)
Token Endpoints
  • POST /oauth/token - Get tokens
  • POST /oauth/token/revoke - Revoke tokens
  • Content-Type: application/x-www-form-urlencoded
JWT Structure
  • Header: Algorithm and token type
  • Payload: Claims (client_id, scopes, exp, etc.)
  • Signature: HMAC-SHA256 verification
An unhandled error has occurred. Reload ×

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please reload the page.