3D Planner postMessage token-length PoC

This controlled proof opens the B&Q planner and requests its authentication message. It displays only the number of characters in the returned bearer token. The token itself is never rendered, stored, logged, or transmitted.

Prerequisite: the test browser must already be signed in to a B&Q account that you are authorized to use. This page must be served from https://3d-planner.diy.

Ready.