Authorization Code + PKCE (public client). Calls the CAMARA API from the browser for demos.
OIDC settings
Values are stored only in this browser (localStorage). No client secret is used.
Session
Access token (decoded payload, not verified)
Raw access token
Call API
Response
Authentication
The API reports auth bypass (CAMARA_AUTH_DISABLED). You can call northbound routes without logging in; use
Login (PKCE) only when you want to test real bearer tokens.