OAuth 2.1 authorization endpoint (consent screen)

GET

/oauth/authorize

• Production

Renders an HTML consent screen. The user must be authenticated via the first-party session cookie. On approval the user is redirected to redirect_uri with ?code=&state=. On error in the validation phase, fatal errors render an HTML error page (no redirect); validation errors after redirect_uri verification redirect with ?error=&state=.

Parameters

Query Parameters

response_type

required

string

Allowed values: code

client_id

required

string

redirect_uri

required

string format: uri

code_challenge

required

string

>= 43 characters <= 128 characters

code_challenge_method

required

string

Allowed values: S256

scope

string

state

string

Responses

200

Consent screen rendered (HTML)

string

302

Redirect to client redirect_uri with code or error

400

Fatal validation error (HTML)

string