Authn.tech
Home
  • SAML 2.0
  • OAuth 2.0
  • OIDC
  • JWT / JOSE
  • WebAuthn / Passkey
  • MFA / TOTP
  • LDAP
  • China Platforms SSO
  • All Tools
  • JWT Decode
  • JWT Sign
  • JWK Gen
  • JWK → PEM
  • PEM → JWK
  • PKCE Gen
  • OIDC Discovery
  • Scan-Login Demo
  • TOTP
  • WebAuthn
  • SAML Codec
  • SAML Metadata
  • SAML Response
  • Feishu SAML
  • X.509 Cert
  • PEM Inspect
  • Base64URL
  • LDAP Filter
  • Overview & Roles
  • OIDC Mock
  • SAML Mock
  • Mail Server
  • LDAP Directory
  • OIDC Login Demo
  • SAML Login Demo
  • WeChat Scan-Login
  • WeCom Scan-Login
  • 简体中文
  • English
  • Deutsch
GitHub
Home
  • SAML 2.0
  • OAuth 2.0
  • OIDC
  • JWT / JOSE
  • WebAuthn / Passkey
  • MFA / TOTP
  • LDAP
  • China Platforms SSO
  • All Tools
  • JWT Decode
  • JWT Sign
  • JWK Gen
  • JWK → PEM
  • PEM → JWK
  • PKCE Gen
  • OIDC Discovery
  • Scan-Login Demo
  • TOTP
  • WebAuthn
  • SAML Codec
  • SAML Metadata
  • SAML Response
  • Feishu SAML
  • X.509 Cert
  • PEM Inspect
  • Base64URL
  • LDAP Filter
  • Overview & Roles
  • OIDC Mock
  • SAML Mock
  • Mail Server
  • LDAP Directory
  • OIDC Login Demo
  • SAML Login Demo
  • WeChat Scan-Login
  • WeCom Scan-Login
  • 简体中文
  • English
  • Deutsch
GitHub
  • Online Tools

    • All Tools
    • JWT / JWK

      • JWT Decode
      • JWT Sign
      • JWK Gen
      • JWK → PEM
      • PEM → JWK
    • OAuth2 / OIDC

      • PKCE Gen
      • Discovery
      • Scan-Login Demo
    • MFA / Passkey

      • TOTP
      • WebAuthn
    • SAML

      • SAML Codec
      • SAML Metadata
      • SAML Response
      • Feishu SAML
    • Certs / Encoding

      • X.509 Cert
      • PEM Inspect
      • Base64URL
    • LDAP

      • LDAP Filter

OIDC Discovery Viewer

Enter an OpenID Provider's issuer (or full discovery URL), fetch and interpret its /.well-known/openid-configuration and JWKS. Pre-filled with this site's Mock OP for direct testing. Also supports manual JSON paste: when target OP lacks CORS, use curl to fetch discovery (and optional JWKS) then switch to "manual JSON paste" mode to parse.

CORS

"Fetch by URL" requests directly from your browser. If the target lacks cross-origin access (CORS), the browser blocks it — that's normal; use command-line curl instead then switch to "manual JSON paste". This site's Mock OP has CORS enabled.

See Discovery and JWKS explanation in OIDC Core Concepts.

Last updated: 7/6/26, 7:49 AM
Contributors: linux, Claude Opus 4.8
Prev
PKCE Gen
Next
Scan-Login Demo