Skip to main content
GET
Authorization Endpoint

Query Parameters

client_id
string
required

OAuth client identifier from /oauth/register

redirect_uri
string<uri>
required

Registered redirect URI

response_type
enum<string>
required

Must be code

Available options:
code
scope
string
default:admin

Space-separated scopes (e.g. products:read orders:write)

state
string

Opaque CSRF token returned in the redirect

code_challenge
string
required

PKCE code challenge (Base64-URL of SHA-256 hash)

code_challenge_method
enum<string>
default:S256
Available options:
S256

Response

HTML login/consent form

The response is of type string.