Skip to main content
POST
Approve authorization and generate code

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json
clientId
string
required

OAuth application client ID

Example:

"app_abc123..."

redirectUri
string
required

Redirect URI registered with the application

Example:

"https://example.com/oauth/callback"

scopes
string[]
required

Approved OAuth scopes

Example:
state
string
required

CSRF protection state parameter

Example:

"random_state_abc123"

codeChallenge
string

PKCE code challenge (optional, from authorization request)

Example:

"E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM"

codeChallengeMethod
enum<string>

PKCE code challenge method (optional, from authorization request)

Available options:
S256,
plain
Example:

"S256"

Response

Authorization approved. Returns authorization code, state, and redirect_uri for client redirect.