Nafath Web Tester

Runs the Nafath Web (OIDC) channel the way Azm.Infath.Iam does: /session → simulated Nafath login page → browser POST of state → /jwt → /jwk. This page plays the role of IAM.

1 Create session GET /nafath-web-oidc/v1/session

Locale

requestId

Hand-off to the built-in test callback (this page continues the flow) Hand-off to the configured IAM URL (NAFATH_WEB_IAM_CALLBACK_URL) — IAM then calls /jwt itself

2 Login as the citizen

waiting for session

Opens in a popup. Pick an identity (e.g. 1084039438), then approve the number. If the popup is blocked, open the session url yourself and paste the state below.

state (received from the browser POST)

1 Create session GET /nafath-web-oidc/v1/session

2 Login as the citizen

3 Exchange state for token POST /nafath-web-oidc/v1/jwt

4 Verify signature GET /nafath-web-oidc/v1/jwk