---
title: "Validate the authorization request and return consent metadata"
method: GET
path: "/v1/oauth/authorize/"
---

# Validate the authorization request and return consent metadata

`GET /v1/oauth/authorize/`

## Request

- Base URL: `https://app.iconik.io/API/auth`
- URL: `https://app.iconik.io/API/auth/v1/oauth/authorize/`
- Auth: none declared. Required headers: `App-ID`, `Auth-Token`
- TypeScript: <https://skmtc.dev/iconik/apis/iconik-auth/docs/v1/oauth/authorize/get.ts> (a function with typed inputs; its response is checked against the schema)

(client name, authorizing user, system domain, scopes, redirect_uri,<br/>state). No code is minted.

## Query parameters

- `client_id` string, required
- `redirect_uri` string, required
- `scope` string, required
- `response_type` string, required
- `code_challenge` string, required
- `code_challenge_method` string

## Headers

- `App-ID` string, required
- `Auth-Token` string, required

## Response `200`

Consent metadata (client name, authorizing user, system domain, scopes, redirect_uri, state).

- OAuth2AuthorizeDescribeSchema
  - `client` OAuth2AuthorizeClientSchema, required
    - `name` string, required
  - `redirect_uri` string, required
  - `requires_admin_approval` boolean
  - `scopes` string[], required
  - `state` string, nullable
  - `system_domain` OAuth2AuthorizeSystemDomain, required
    - `id` string, uuid, required
    - `name` string, required
  - `user` OAuth2AuthorizeUser, required
    - `email` string, email, required
    - `first_name` string, nullable
    - `id` string, uuid, required
    - `last_name` string, nullable
    - `photo` string, nullable

## Other responses

- `400`: Bad request (invalid client_id, redirect_uri, scope, etc.)
- `default`: Error response

---

[API](https://skmtc.dev/iconik/apis/iconik-auth.md) - [All operations](https://skmtc.dev/iconik/apis/iconik-auth/llms.txt) - [OpenAPI document](https://skmtc.dev/iconik/apis/iconik-auth/revisions/5dde985bb742?raw)