OAuth2 Authorization Endpoint

GET

/oauth2/authorize

Initiates the OAuth2 authorization flow using the Authorization Code grant with PKCE (S256).

Parameters

response_type

required

string

Allowed values: code otp

Must be set to code for Authorization Code flow or OTP.

client_id

required

string

The client application’s identifier.

redirect_uri

required

string format: uri

URI to redirect back to after authorization.

scope

string

Space-separated scopes requested by the client.

state

string

Opaque value to maintain state between request and callback.

code_challenge

string

For public clients, code challenge derived from the code verifier (PKCE).

code_challenge_method

string

Allowed values: S256

For public clients, the code challenge method, must be ‘S256’.

Redirect to the client’s redirect URI with authorization code.

Invalid request parameters.