LIFF nonce observation

Controlled test. The observer does not verify signatures or prove authentication. A nonce label is not evidence of a secure login.

Connect initializes LINE's SDK. In LINE's LIFF browser this can automatically log in or request consent. In an external browser, use the separate Login button only after initialization. On return, click Connect again. Do not copy or share the address bar.

The observer displays fixed labels only and adds no token transmission of its own. After Connect, LINE's SDK communicates with LINE and may send authorization codes, a PKCE verifier and tokens, including an access token in a LINE verification URL. The SDK stores access tokens, ID tokens and decoded claims in browser storage and writes an expiry cookie. An SDK endpoint-mismatch warning can include the current full URL. This public page is hosted by Cloudflare, which receives page and callback requests and may retain request logs. Reporting-policy clearing headers do not prove that every browser cache is cleared or that hosting logs are absent. There is no global no-network, no-storage or no-logging guarantee.

Loading this page does not load the LINE SDK or call initialization or login. Connect is an explicit test action and may trigger LINE login or consent inside the LIFF browser. Opening a LIFF link can reach LINE before this page. Callback URL information can remain while waiting for Connect, or after failed or cancelled initialization. Do not copy or share that URL. SDK cleanup, network compatibility and the nonce outcome have not been verified by a live test. If this bounded test is blocked, stop for review rather than broadening permissions.

Stop does not undo SDK login, network requests or SDK storage. After stopping, reload to begin a new attempt.

disabled