---
title: "Authorization challenge endpoint in case a first party flow is enabled with the integrated authorization server"
method: POST
path: "/authorization-challenge"
tags: ["Integrated Authorization Server"]
---

# Authorization challenge endpoint in case a first party flow is enabled with the integrated authorization server

`POST /authorization-challenge`

## Request body

- AuthorizationChallengeRequest — Request to initiate authorization challenge
  - `client_id` string — Client identifier
  - `issuer_state` string — Opaque state from issuer
  - `auth_session` string — Session identifier for associating subsequent requests
  - `scope` string
  - `code_challenge` string
  - `code_challenge_method` 'plain' | 'S256'
  - `presentation_during_issuance_session` string

## Response `200`

Successful response

- AuthorizationChallengeResponse
  - `authorization_code` string, required

---

[API](https://skmtc.dev/sphereon-opensource/apis/sphereon-oid4vci-api.md) · [All operations](https://skmtc.dev/sphereon-opensource/apis/sphereon-oid4vci-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/sphereon-opensource/sphereon-oid4vci-api/revisions/bc177bfc5928/schema)