Inspect consent before redirect.
Validate generic authorization-code request hygiene without assuming a provider endpoint, live account, or platform-specific scope.
Request manifest
Uses fictional example.test endpoints. No request is sent and no account is accessed.