---
title: "Authorization endpoint"
method: GET
path: "/api/oauth/authorize"
tags: ["OAuth"]
---

# Authorization endpoint

`GET /api/oauth/authorize`

## Request

- Base URL: `https://makefx.app`
- URL: `https://makefx.app/api/oauth/authorize`
- Auth: none declared

Starts an authorization code flow with PKCE (S256). Sends the person to sign in and consent, then back to the redirect URI with a code.

## Query parameters

- `client_id` string, required
- `redirect_uri` string, uri, required
- `response_type` 'code', required
- `code_challenge` string, required
- `code_challenge_method` 'S256', required
- `scope` string
- `resource` string, uri
- `state` string

## Headers

- `API-Version` '2026-09-10'

## Other responses

- `302`: Sends the browser to the next step of the flow; there is no body
- `400`: The request did not match the schema
- `401`: unauthorized_client: the client_id is not registered here
- `404`: Not found
- `429`: Rate limited. RateLimit names the policy; Retry-After says when to try again
- `500`: Internal server error

---

[API](https://skmtc.dev/makefx/apis/makefx-app-api.md) · [All operations](https://skmtc.dev/makefx/apis/makefx-app-api/llms.txt) · [OpenAPI document](https://skmtc.dev/makefx/apis/makefx-app-api/revisions/a05584da31c6?raw)