Authorization Code + PKCE (public client). Calls the CAMARA API from the browser for demos.
Access token (decoded payload, not verified)
Raw access token
Call API
Copyable curl
Response
Authentication
The API reports auth bypass (CAMARA_AUTH_DISABLED). You can call northbound routes without logging in; use
Login only when you want to test real bearer tokens. Logout ends the Auth0 session (and the simulator also clears any locally stored tokens).
