Secure sign-in
Alpha Bank uses the OpenID Connect Authorization Code flow with PKCE and scopes
openid profile email offline_access. Discovery document:
https://ssp-partner-id.security.demo-broadcom.com/alphabank/.well-known/openid-configuration
- authorization_endpoint — redirect user for authentication
- token_endpoint — exchange code / refresh tokens
- userinfo_endpoint — retrieve claims (JSON, JWT, or Base64 JSON handled in code)
- revocation_endpoint — revoke access & refresh tokens on refresh and logout
- jwks_uri — signing keys for JWT validation (server-side in production)
API explorer:
Swagger UI
(/swagger/) — try banking and OAuth proxy endpoints against this host.
Configure your registered client_id and redirect URI (must match this deployment’s HTTPS
origin + /index.html) in config/oauth-config.js or inject
window.__ALPHA_BANK_CLIENT_ID__ via server include.
Sign-in errors appear in a notification at the top of the page.
Welcome
Valued Customer
Your secure Alpha Bank dashboard.