OAuth2 Authorization Code + PKCE — token delivery harness

Browser talks to a wrapper on :9000, not Keycloak directly. The wrapper does the code → tokens exchange server-side and returns the token in whichever mode you pick below.

Config

Issuer Client ID

Redirect URI Wrapper

1. Choose a delivery mode

body: application/json → sessionStorage body: application/xml → sessionStorage body: text/plain → sessionStorage response header: X-Your-Golden-Ticket Set-Cookie: browser cookie jar JSON body → localStorage JSON body → sessionStorage

2. Login

Where the token is right now

not logged in

Last response from the wrapper

(none yet)