OAuth

Redirect the chef through OAuth consent

get/oauth/authorize

Request

  • Base URL: https://spoonjoy.app
  • URL: https://spoonjoy.app/oauth/authorize
  • Auth: one of:
    • none
    • API key in cookie __session

Query parameters

response_type'code' required
client_idstring required
redirect_uristring uri required

Exact OAuth redirect URI. Production callbacks must use HTTPS. HTTP is accepted only for localhost or 127.0.0.1 development loopback. Fragments, userinfo, wildcards, and custom schemes are rejected.

scopestring
Example:kitchen:read

Requested grant scopes. Omit for Spoonjoy's runtime default of kitchen:read; shopping-list apps should explicitly request shopping_list:read shopping_list:write.

statestring required
Example:state_random_32_chars_per_attempt

Opaque client state generated per authorization attempt and verified after the redirect callback.

code_challengestring required
code_challenge_method'S256' required
resourcestring uri

Protected resource audience. Use https://spoonjoy.app/mcp only for MCP OAuth; omit for REST OAuth apps.

Response

Renders Spoonjoy consent HTML for a signed-in chef.

Changes

No recorded changes to this operation across all 1 revision of this API.