---
title: "Authorization endpoint (authorization-code + PKCE)"
method: GET
path: "/oauth/authorize"
tags: ["OAuth"]
---

# Authorization endpoint (authorization-code + PKCE)

`GET /oauth/authorize`

## Request

- Base URL: `https://api.deadsimple.email`
- URL: `https://api.deadsimple.email/oauth/authorize`
- Auth: none required

Redirects the user to the consent page at app.deadsimple.email/oauth/consent. code_challenge (S256) is required; the code is bound to the approving account.

## Query parameters

- `client_id` string, required
- `redirect_uri` string, required
- `response_type` 'code', required
- `code_challenge` string, required
- `code_challenge_method` 'S256'
- `state` string
- `resource` string

## Other responses

- `302`: Redirect to consent, or back to redirect_uri with an error.
- `400`: Unknown client or unregistered redirect_uri (never redirected).

---

[API](https://skmtc.dev/deadsimple/apis/dead-simple-email-api.md) · [All operations](https://skmtc.dev/deadsimple/apis/dead-simple-email-api/llms.txt) · [OpenAPI document](https://skmtc.dev/deadsimple/apis/dead-simple-email-api/revisions/c697881be131?raw)