---
title: "Submit the authorisation (login) form"
method: POST
path: "/oauth/authorize"
tags: ["OAuth"]
---

# Submit the authorisation (login) form

`POST /oauth/authorize`

## Request

- The document declares no server URL.
- Auth: none declared

Authenticates the resource owner's username and password against the same fields listed above plus username, password and csrf_token, then redirects to redirect_uri with an authorisation code (or an error) per RFC 6749 section 4.1.2. No bearer authentication is required.

## Request body `application/x-www-form-urlencoded`

- object

## Other responses

- `302`: Redirect to redirect_uri, carrying either a code or an error.

## Changes

- **2026-09-28** `d47e9fb78ad0`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api/changes/oauth/authorize/post.md)

---

[API](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api.md) - [All operations](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api/llms.txt) - [OpenAPI document](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api/revisions/d47e9fb78ad0?raw)