EVE Single Sign-On (SSO)
EVE Single Sign-On (SSO) is the OAuth 2.0 authorization service for EVE Online third-party applications, hosted at login.eveonline.com. It supports the Authorization Code flow for confidential (server-side) applications and Authorization Code with PKCE for native and single-page apps that cannot keep a client secret. Access tokens are issued as RS256-signed JWTs whose sub claim is CHARACTER:EVE:, whose aud must contain both the application client_id and the literal "EVE Online", and whose scp claim lists the granted ESI scopes. The service publishes RFC 8414 metadata at /.well-known/oauth-authorization-server, including authorization, token, revocation, and JWKS endpoints.