Discovers the server's authorization server, registers this page as a client, and runs an authorization-code flow with PKCE. Needs this page served over http(s), not opened from disk.
Connect to see identity and capabilities.