motd.xaa.rocks

Cross App Access Demo

Cross App Access is an OAuth extension that enables an enterprise IdP to manage the OAuth connections between applications.

The Cross App Access flow between the IdP, the Client and the Resource

Endpoints

This website acts as a Resource application. You can use it to test out building a Client. As a Resource application, it includes both an internal Authorization Server as well as a simple API.

Token
https://motd.xaa.rocks/token

Issues access tokens when presented with a valid ID-JAG

Message
https://motd.xaa.rocks/motd

When presented with a valid access token, returns the message of the day

MCP
https://motd.xaa.rocks/mcp

You can connect to this MCP server to retrieve the message of the day via MCP

Try it

  1. Configure your IdP to issue ID-JAGs with an audience value of 
    https://motd.xaa.rocks/
  2. Sign in to your Client through the IdP
  3. Make a Token Exchange request to your IdP to exchange the ID Token for an ID-JAG
  4. Make an Access Token request to this website to exchange the ID-JAG for an access token
  5. Make a request to this website's motd endpoint to find the daily secret message
Any issuer is accepted. This website will accept ID-JAGs from any issuer for demonstration purposes. In practice, a SaaS app like this will likely restrict the issuers it accepts ID-JAGs from to enterprise IDPs of current customers.