OAuth

Oauth Authorize Get

OAuth 2.0 authorization endpoint (GET).

This endpoint validates the request and redirects to the consent page where the user can select a project and authorize the client.

Implements RFC 6749 Section 4.1.1 (Authorization Request) and 4.1.2.1 (Error Response).

SECURITY POLICY: PKCE (RFC 7636) with S256 is REQUIRED for all clients. Clients must provide code_challenge and code_challenge_method=S256 parameters.

RFC 8707: The resource parameter identifies the target resource server for which the token will be issued.

Note: While RFC 6749 lists redirect_uri as OPTIONAL, Section 3.1.2 states it MUST be included if multiple redirect URIs are registered. This implementation requires it.

get/oauth/authorize

Request

Query parameters

response_typestring nullable
client_idstring nullable
redirect_uristring nullable
scopestring nullable
statestring nullable
code_challengestring nullable
code_challenge_methodstring nullable
resourcestring nullable
request_uristring password nullable

Cookies

logfire_tokenstring password nullable

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.