OAuth claim flow

A local authorize/return walkthrough for scoped verified claims without raw PII. This starter is intentionally dependency-light: inspect it, adapt the shape locally, then replace placeholders only after Test Integration credentials are issued from the authenticated CAIRL workspace.

Starter code

// SANDBOX_SYNTHETIC=true
const authorizeUrl = new URL("/oauth/sandbox/authorize", "http://localhost:3000");
authorizeUrl.searchParams.set("recipe", "oauth");
authorizeUrl.searchParams.set("context", "SANDBOX_CONTEXT_ID");
authorizeUrl.searchParams.set("response_type", "synthetic_code");
authorizeUrl.searchParams.set("scope", "claims:age.over_18.v1.strict");
authorizeUrl.searchParams.set("state", "synthetic-local-state");

No hidden internal credentials.

Synthetic-only preview state.

Graduate through Test Integration before live.