IWANA API test app

A third-party Express app. It signs a user in with IWANA (OAuth 2.0 + PKCE) and calls the public API with either the OAuth token or an API key. Target:

1 · Sign in with IWANA …

Call the API with the OAuth token:

2 · API key …

Create a key in the IWANA dashboard (Settings → Developers) and paste it here. It is kept in the server session only and never returned to the browser.

Call the API with the key:

How it works

Authorize: GET {iwana}/oauth/authorize?response_type=code&client_id=…&redirect_uri=…&state=…&code_challenge=…&code_challenge_method=S256
Token: POST {iwana}/api/v1/oauth/token (form-encoded, grant_type=authorization_code or refresh_token)
Userinfo: GET {iwana}/api/v1/oauth/userinfo with Authorization: Bearer iwa_at_…
API: GET {iwana}/api/v1/pro/… with Authorization: Bearer <OAuth token or API key>

Redirect URI registered for this app: