---
title: "Oauth2 Authorize"
method: GET
path: "/api/oauth2/authorize"
tags: ["OAuth 2.1"]
---

# Oauth2 Authorize

`GET /api/oauth2/authorize`

## Request

- Base URL: `https://api.agentstack.tech` (the document declares no server; this is the origin it was published from)
- URL: `https://api.agentstack.tech/api/oauth2/authorize`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

OAuth 2.1 Authorization Endpoint

Генерирует authorization code для Authorization Code Flow.
Пользователь должен быть авторизован (через существующую систему).

## Query parameters

- `client_id` string, required: OAuth client ID
- `redirect_uri` string, required: Redirect URI after authorization
- `response_type` string: Response type (always 'code' for OAuth 2.1)
- `scope` string, nullable: Requested scopes (space-separated)
- `state` string, nullable: CSRF protection state
- `code_challenge` string, nullable: PKCE code challenge
- `code_challenge_method` string, nullable: PKCE method (S256 or plain)

## Response `200`

Successful Response

- unknown

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `422`: Validation Error
- `429`: Too Many Requests
- `500`: Internal Server Error

---

[API](https://skmtc.dev/agentstack/apis/agentstack-core-api.md) · [All operations](https://skmtc.dev/agentstack/apis/agentstack-core-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agentstack/apis/agentstack-core-api/revisions/79f4a4dd8813?raw)