Shared pool OAuth demo
stage devcognito-idp.us-west-2.amazonaws.com
Signing in runs the authorization-code flow with PKCE against the shared Cognito pool at
https://auth.customer-dev.tenfoldai.io. The session is kept in HttpOnly cookies, so
returning to this page later goes straight through to the protected page.
The second link should return 401 — that is the authorizer rejecting an unauthenticated request.