CohabitDeveloper Portal

Verifying a project

Before going live, confirm your project is wired up correctly.

Check the discovery document

Every OIDC-compliant client can be configured entirely from one URL:

https://auth.cohabit.com.au/.well-known/openid-configuration

This document lists every endpoint your application needs — authorization, token, userinfo, JWKS, and revocation.

Test the login flow

  1. Send a user to the authorization endpoint with your project's client_id, a redirect_uri that matches one registered on your project, and a PKCE code_challenge.
  2. Confirm the user lands on the Cohabit login screen and, after signing in, is redirected back to your redirect_uri with a code parameter.
  3. Exchange that code at the token endpoint for an access token and ID token.

If any step fails, check Troubleshooting first — most issues are a redirect_uri mismatch.