authentik OIDC 流程调试器

发起 Authorization Code Flow，在回调页查看完整 HTTP 交互，并测试 OIDC logout。

OIDC URIs（请在 authentik Provider 侧注册）

Redirect URI

Post Logout Redirect URI

Back-Channel Logout URI

根据当前浏览器地址栏自动生成。

authentik 配置

{
  "client_id": "hAUhlbVweGanpOwodB815OfkVwfWxdFqEgktQvTC",
  "configured": true,
  "discovery_url": "https://iam.vm.tooqing.com/application/o/oidc-demo/.well-known/openid-configuration",
  "display_name": "authentik",
  "endpoints": {
    "authorization": "https://iam.vm.tooqing.com/application/o/authorize/",
    "end_session": "https://iam.vm.tooqing.com/application/o/oidc-demo/end-session/",
    "issuer": "https://iam.vm.tooqing.com/application/o/oidc-demo/",
    "jwks": "https://iam.vm.tooqing.com/application/o/oidc-demo/jwks/",
    "token": "https://iam.vm.tooqing.com/application/o/token/",
    "userinfo": "https://iam.vm.tooqing.com/application/o/userinfo/"
  },
  "extra_scopes": [
    "roles",
    "avatar"
  ],
  "name": "authentik",
  "scopes": [
    "openid",
    "profile",
    "email",
    "roles",
    "avatar"
  ],
  "slug": "oidc-demo"
}

开始登录

流程概览

Step 0 OIDC Discovery — 拉取 /.well-known/openid-configuration
Step 1 浏览器跳转到 authentik 授权页
Step 1b authentik 回调，携带 code 与 state
Step 2 用 authorization code 换取 access_token（及 id_token）
Step 3 用 access_token 请求 UserInfo
Logout 可测试 RP-Initiated Logout 与 Back-Channel Logout