IDE

Visual Studio Code

Cleared for real VS Code OAuth/CIMD test.

observed: cimd

Observed evidence: Authorization used client_id metadata URL https://vscode.dev/oauth/client-metadata.json.
Observed at: 2026-08-11T19:24:35.669Z
Metadata URL: https://vscode.dev/oauth/client-metadata.json
Vendor: Microsoft
Source URL: Unknown
Claimed status: unknown

Known Metadata

Client name: Visual Studio Code
Client URI: https://vscode.dev/product
Logo URI: https://code.visualstudio.com/assets/branding/code-stable.png
Grant types: authorization_code, refresh_token, urn:ietf:params:oauth:grant-type:device_code
Response types: code
Token endpoint auth method: none
Application type: native
Redirect URIs: http://127.0.0.1:33418/, https://vscode.dev/redirect

Latest OAuth Attempt

Timestamp: 2026-08-11T19:24:35.669Z
Path: GET /authorize
Client ID: https://vscode.dev/oauth/client-metadata.json
Redirect URI: http://localhost:33418/
Scope: cimd:read
PKCE: S256: -pFA_mvS_OuUBURlCsx6kcHoXDcMZpCgHjC-zr-X1gw
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5.2 Safari/605.1.15

Validation Result

fail at 2026-08-11T19:24:36.307Z

Errors

requested redirect_uri is not listed in metadata.redirect_uris

Warnings

No validation warnings.

Raw metadata JSON

{
  "client_name": "Visual Studio Code",
  "logo_uri": "https://code.visualstudio.com/assets/branding/code-stable.png",
  "grant_types": [
    "authorization_code",
    "refresh_token",
    "urn:ietf:params:oauth:grant-type:device_code"
  ],
  "response_types": [
    "code"
  ],
  "token_endpoint_auth_method": "none",
  "application_type": "native",
  "client_id": "https://vscode.dev/oauth/client-metadata.json",
  "client_uri": "https://vscode.dev/product",
  "redirect_uris": [
    "http://127.0.0.1:33418/",
    "https://vscode.dev/redirect"
  ]
}