OAuth

Start an authorization (browser)

OAuth 2.1 authorization endpoint. Sends the user to the HonkIO consent screen, then back to redirect_uri with a code. PKCE S256 is required. Client ids may be Client ID Metadata Document URLs (https), dynamically registered ids, or pre-registered ids. A request that fails validation is answered with an error page; it is redirected back with an error only when redirect_uri is loopback or the client is pre-registered.

get/oauth/authorize

Request

  • Base URL: https://api.honkio.ca
  • URL: https://api.honkio.ca/oauth/authorize
  • Auth: none required

Query parameters

response_typestring

Must be code.

client_idstring
redirect_uristring

Must match one registered for the client; loopback URIs match regardless of port.

scopestring

Space-separated. Omit for the default set (everything except account:manage).

statestring

At most 512 characters.

code_challengestring

43 to 128 base64url characters (RFC 7636).

code_challenge_methodstring

Must be S256.

resourcestring

RFC 8707 resource indicator, the MCP endpoint URL.

Changes

No recorded changes to this operation across all 1 revision of this API.