---
title: "OIDC authorization endpoint (PKCE S256). W272: response_mode=web_message posts the code to the opener page from a popup; prompt=none|login; a live session fast-paths to one tap."
method: GET
path: "/auth/authorize"
tags: ["auth"]
---

# OIDC authorization endpoint (PKCE S256). W272: response_mode=web_message posts the code to the opener page from a popup; prompt=none|login; a live session fast-paths to one tap.

`GET /auth/authorize`

## Request

- Base URL: `https://obeliskgate.com`
- URL: `https://obeliskgate.com/auth/authorize`
- Auth: none declared

## Query parameters

- `client_id` string
- `redirect_uri` string
- `response_mode` string
- `prompt` string

## Response `200`

Success.

## Other responses

- `default`: Error — { ok:false, reason:<code>, message?:<human> } on failures; HTTP status mirrors it.

---

[API](https://skmtc.dev/obeliskgate/apis/obelisk-api.md) · [All operations](https://skmtc.dev/obeliskgate/apis/obelisk-api/llms.txt) · [OpenAPI document](https://skmtc.dev/obeliskgate/apis/obelisk-api/revisions/b99b2069699b?raw)