Test OIDC client connection

curl -s -X POST https://<OKTA_DOMAIN>/oauth2/v1/token \
       -d "grant_type=authorization_code" \
       -d "code=invalid-test" \
       -d "client_id=<CLIENT_ID>" \
       -d "client_secret=<CLIENT_SECRET>" \
       -d "redirect_uri=https://placeholder/callback" | jq

invalid_grant is a valid response

Related

• Test using /oauth2/v1/introspect

See also

• IdP <-> RP, client_id, client_secret, Issuer URL, QUARKUS_OIDC_CLIENT_ID, .well-known/openid-configuration, grant_type
• redirect_uri, Keycloak OIDC
• /token, Decode token: iss, /userinfo, /authorize, token_endpoint_auth_method, token_type, Bearer, invalid_grant, invalid_client, /.well-known/openid-configuration, /oauth2/v1/token, Token metadata