Authorization Request

Your browser is about to make this authorization request to Kanidm. These are the parameters -- find them again in Burp.

response_typecode
client_idfollow-token
redirect_urihttps://follow-token.lab.quokkahost.com/callback
scopeopenid email profile
statequ5AG136WJ_7TsOfYiQbMg
noncemJZzOMjiQGZInXxzMGkAmA
code_challenge-cJ_-VCrsI9HvJ6smfOnSCf6JHZzaOtXdY4yM6cESog
code_challenge_methodS256

Full URL:

"https://kanidm.lab.quokkahost.com/ui/oauth2?response_type=code&client_id=follow-token&redirect_uri=https%3A%2F%2Ffollow-token.lab.quokkahost.com%2Fcallback&scope=openid+email+profile&state=qu5AG136WJ_7TsOfYiQbMg&nonce=mJZzOMjiQGZInXxzMGkAmA&code_challenge=-cJ_-VCrsI9HvJ6smfOnSCf6JHZzaOtXdY4yM6cESog&code_challenge_method=S256"

We kept the PKCE code_verifier server-side (never sent in this request). We only sent its SHA-256 as code_challenge.

Send authorization request to Kanidm →