---
title: "OAuth 2.1 authorization endpoint (consent screen)"
method: GET
path: "/oauth/authorize"
tags: ["OAuth"]
---

# OAuth 2.1 authorization endpoint (consent screen)

`GET /oauth/authorize`

## Request

- Base URL: `https://app.buildworkpro.com/api/v1`
- URL: `https://app.buildworkpro.com/api/v1/oauth/authorize`
- Auth: none required

Renders an HTML consent screen. The user must be authenticated via the first-party session cookie. On approval the user is redirected to redirect_uri with `?code=&state=`. On error in the validation phase, fatal errors render an HTML error page (no redirect); validation errors after redirect_uri verification redirect with `?error=&state=`.

## Query parameters

- `response_type` 'code', required
- `client_id` string, required
- `redirect_uri` string, uri, required
- `code_challenge` string, required
- `code_challenge_method` 'S256', required
- `scope` string
- `state` string

## Response `200`

Consent screen rendered (HTML)

## Other responses

- `302`: Redirect to client redirect_uri with code or error
- `400`: Fatal validation error (HTML)

---

[API](https://skmtc.dev/buildworkpro/apis/buildworkpro-api.md) · [All operations](https://skmtc.dev/buildworkpro/apis/buildworkpro-api/llms.txt) · [OpenAPI document](https://skmtc.dev/buildworkpro/apis/buildworkpro-api/revisions/441cf40012f7?raw)