Authentication

Authorization endpoint

Changed on

The authorization endpoint is used to interact with the resource owner and obtain an authorization grant.

get/oauth/authorize

Request

  • The document declares no server URL.
  • Auth
    API key in header Authorization

Query parameters

response_typestring required

The value MUST be one of "code" for requesting an authorization code as described by [RFC6749] Section 4.1.1, "token" for requesting an access token (implicit grant) as described by [RFC6749] Section 4.2.2.

client_idstring required

OAuth 2.0 Client Identifier valid at the Authorization Server.

redirect_uristring required

Redirection URI to which the response will be sent. This URI MUST exactly match one of the Redirection URI values for the Client pre-registered at the OpenID Provider.

scopestring

OpenID Connect requests MUST contain the openid scope value. If the openid scope value is not present, the behavior is entirely unspecified.

statestring

Opaque value used to maintain state between the request and the callback.

Response

OK

Changes

    • info

      api operation id authorize removed and replaced with openid-authorize-get

    • breaking

      the query request parameter redirect_uri became required

    • info

      api operation id Authorize removed and replaced with authorize

    • info

      added the new optional query request parameter scope

    • info

      added the new optional query request parameter state

    • info

      removed the non-success response with the status

    • info

      added the success response with the status