Skip to main content
GET
Authorization endpoint

Query Parameters

response_type
enum<string>
required
Available options:
code
client_id
string
required
redirect_uri
string<uri>

Required when the client has more than one registered URI; must exactly match a registered URI.

scope
string

Space-delimited; subset of the client's registered scopes (defaults to all).

state
string
required

Opaque value echoed back on the redirect.

code_challenge
string
required

PKCE S256 challenge.

code_challenge_method
enum<string>
required
Available options:
S256
resource
string<uri>

RFC 8707 resource indicator; must equal the canonical resource URI when supplied.

Response

Redirect — to the consent page (unauthenticated browser), or back to redirect_uri with code+state+iss on success or error+error_description+state+iss on a recoverable error.