---
title: "Start OAuth authorization"
method: GET
path: "/api/oauth/authorize"
tags: ["OAuth"]
---

# Start OAuth authorization

`GET /api/oauth/authorize`

## Request

- Base URL: `https://git.cafe`
- URL: `https://git.cafe/api/oauth/authorize`
- Auth: none required

Validates a registered client, exact redirect URI, resource indicator and PKCE request, then redirects to same-origin browser consent. Local failures never redirect to caller input.

## Query parameters

- `response_type` 'code', required
- `client_id` union, required
  - string
  - string, uri
- `redirect_uri` string, uri, required
- `scope` string
- `state` string
- `code_challenge` string, required
- `code_challenge_method` 'S256', required
- `resource` string, uri
- `nonce` string

## Other responses

- `302`: Response for status 302
- `400`: Response for status 400
- `429`: A rate limit is exhausted. Wait Retry-After seconds; the value is a hint, so back off on a repeat 429.

---

[API](https://skmtc.dev/gitcafe/apis/git-cafe-api.md) - [All operations](https://skmtc.dev/gitcafe/apis/git-cafe-api/llms.txt) - [OpenAPI document](https://skmtc.dev/gitcafe/apis/git-cafe-api/revisions/9fa233d2986d?raw)