URL Parser & Builder

Decompose any URL into its components and rebuild it from the parts

Components Edit any field to rebuild the URL
Scheme
Host
Port
Path
Query Parameters
No query parameters
Fragment (#)
Decoded Parameter Values

URLs in Authentication

Why URL structure matters in OAuth2 and OIDC

Redirect URIs

OAuth2 requires exact redirect URI matching. A mismatched scheme, host, path, or trailing slash causes authorization failures. Parse both the registered and actual URI to spot differences instantly.

Authorization Requests

The OAuth2 authorization endpoint URL carries all request parameters — client_id, scope, response_type, state, nonce, PKCE challenge — as query parameters. Parse them to audit what's being requested.

Debugging Callbacks

After an OAuth2 flow, the callback URL contains the authorization code, state, and sometimes error details as query parameters. Parse the full callback URL to extract and verify each value.

Need a production-ready OAuth2 authorization server?

AuthAction handles redirect URI validation, authorization codes, token issuance, and PKCE — all correctly implemented so you don't have to.