Skip to content

Authorize​

GET
/oauth/authorize

Browser-facing authorization endpoint for the authorization code flow with PKCE. End users authenticate interactively before consent is completed.

Parameters​

Query Parameters

response_type*
Type
string
Required
client_id*
Type
string
Required
Format
"uuid"
redirect_uri*

Must exactly match the application's registered redirect URI.

Type
string
Required
Format
"uri"
scope*

Space-separated scopes. Supported values are user.public and user.full.

Type
string
Required
Example"user.full"
state*
Type
string
Required
code_challenge*
Type
string
Required
code_challenge_method

Defaults to S256 when omitted. plain is not accepted.

Type
string
Valid values
"S256"
Default
"S256"

Responses​

Redirects to the registered redirect URI with code and state query parameters on success.

Playground​

Variables
Key
Value

Samples​