auth-keycloak
Authorize Endpoint
OAuth 2.0 authorization endpoint (auth-code + PKCE).
Validates the request, then 302-redirects the BROWSER to the portal consent page carrying the validated params. This endpoint does NOT authenticate the user — the portal holds the human session and drives /approve.
Errors that can't be safely redirected (bad/missing client_id or redirect_uri) → 400. All other errors AFTER redirect_uri is validated → 302 back to redirect_uri?error=.. (RFC 6749 §4.1.2.1).
get/realms/public/protocol/openid-connect/auth
Query parameters
response_typestring nullable
client_idstring nullable
redirect_uristring nullable
scopestring nullable
statestring nullable
code_challengestring nullable
code_challenge_methodstring nullable
Response
Successful Response
{"stackTrail":"paths:/realms/public/protocol/openid-connect/auth:get:responses:200:content:application/json:schema","oasType":"schema","type":"unknown"}
Changes
No recorded changes to this endpoint across all 1 revision of this API.