---
title: "Partner authorization endpoint (browser redirect)"
method: GET
path: "/oauth/partner/authorize"
tags: ["partner-oauth"]
---

# Partner authorization endpoint (browser redirect)

`GET /oauth/partner/authorize`

Validates the client, redirect URI, response type, scopes and PKCE parameters, then redirects the browser to the RxFood-hosted login and consent page. Client/redirect failures are rendered in place and never redirected.

## Query parameters

- `client_id` string, required
- `redirect_uri` string, required
- `response_type` string
- `scope` string
- `state` string
- `code_challenge` string
- `code_challenge_method` string

## Other responses

- `302` — Redirect to the RxFood consent page, or back to the registered redirect URI with an OAuth error
- `400` — invalid_request — redirect URI not registered or malformed request
- `401` — invalid_client — unknown or inactive client_id

---

[API](https://skmtc.dev/rxfoodapp/apis/inneranalytics-mnt-server.md) · [All operations](https://skmtc.dev/rxfoodapp/apis/inneranalytics-mnt-server/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/rxfoodapp/inneranalytics-mnt-server/revisions/0703cbbbefe8/schema)