Platform: start pairing

The platform prepares a secure OpenVPT verification request by generating a one-time challenge and binding it to the current user session.

Request parameters

aud
https://openvpt.dev

nonce
cQPl6HN3Zii4CuhlGk3u6S7wTxUxeF82

state
hCbM9C1VmwhdmuN91y1hu3TA

What these values mean

aud — Audience

Identifies the platform for which the OpenVPT token will be issued. The token is cryptographically bound to this audience and cannot be replayed on another service.

nonce — One-time challenge

A randomly generated value that ensures the issued token is fresh and created specifically in response to this request.

state — Session binding

Binds the verification flow to the initiating user session and protects against cross-request and CSRF-style attacks.

Continue to Identity Provider

No personal data is shared at this stage. The platform only prepares a cryptographically verifiable request according to the OpenVPT specification.