Skip to content

Authorize

GET
/oauth/authorize

Browser-facing authorization endpoint for the authorization code flow with PKCE. End users authenticate interactively before consent is completed.

Parameters

Query Parameters

response_type*
Type
string
Required
client_id*
Type
string
Required
Format
"uuid"
redirect_uri*

Must exactly match the application's registered redirect URI.

Type
string
Required
Format
"uri"
scope*

Space-separated scopes. Supported values are user.public and user.full.

Type
string
Required
Example"user.full"
state*
Type
string
Required
code_challenge*
Type
string
Required
code_challenge_method

Defaults to S256 when omitted. plain is not accepted.

Type
string
Valid values
"S256"
Default
"S256"

Responses

Redirects to the registered redirect URI with code and state query parameters on success.

Playground

Variables
Key
Value

Samples