Interactive, animated simulator for understanding OAuth 2.0 and OpenID Connect: Authorization Code with PKCE, Device Code, Client Credentials and the old Implicit flow, step by step and with experiments for breaking things on purpose. Every flow runs against a real authorization server living in a Service Worker: requests, redirects and signed JWTs are real, yet static hosting is all it needs.
