Security flow analyzer

OAuth/OIDC Flow Checker

Paste an authorization request and optional discovery metadata to catch redirect, PKCE, state, nonce, implicit-flow, and endpoint-policy mistakes before release.