# Playground Enter your own values below. Everything is generated in your browser; nothing is sent anywhere until you follow the link yourself.

## What the playground does It generates a code verifier and its S256 challenge, assembles the authorization URL, and shows you the exact `curl` command for the token exchange with your verifier already filled in. The verifier never leaves the page. That is the point of PKCE: the value that proves the token request came from the same client that started the flow is known only to that client.