Skip to main content
GET
OAuth2 Authorization Endpoint (redirects to consent screen)

Query Parameters

client_id
string
required

OAuth application client ID

Example:

"app_abc123..."

redirect_uri
string
required

Redirect URI registered with the application

Example:

"https://example.com/oauth/callback"

scope
string
required

Comma-separated list of requested scopes

Example:

"read:user,read:organization"

state
string
required

CSRF protection state parameter. Client should generate a random value and verify it on callback.

Example:

"random_state_abc123"

response_type
string
default:code
required

Response type (must be 'code' for Authorization Code Flow)

Example:

"code"

code_challenge
string

PKCE code challenge (optional, for enhanced security). Base64-URL encoded SHA256 hash of code_verifier.

Example:

"E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM"

code_challenge_method
enum<string>

PKCE code challenge method. Use 'S256' for SHA256 hashing (recommended) or 'plain' for no hashing.

Available options:
S256,
plain
Example:

"S256"

Response

Redirects to consent screen with validated parameters. User will be prompted to authorize or deny the application.