---
title: "Redirect the chef through OAuth consent"
method: GET
path: "/oauth/authorize"
tags: ["OAuth"]
---

# Redirect the chef through OAuth consent

`GET /oauth/authorize`

## Request

- Base URL: `https://spoonjoy.app`
- URL: `https://spoonjoy.app/oauth/authorize`
- Auth: one of:
  - none
  - API key in cookie `__session`

## Query parameters

- `response_type` 'code', required
- `client_id` string, required
- `redirect_uri` string, uri, required: Exact OAuth redirect URI. Production callbacks must use HTTPS. HTTP is accepted only for localhost or 127.0.0.1 development loopback. Fragments, userinfo, wildcards, and custom schemes are rejected.
- `scope` string
- `state` string, required
- `code_challenge` string, required
- `code_challenge_method` 'S256', required
- `resource` string, uri

## Response `200`

Renders Spoonjoy consent HTML for a signed-in chef.

## Other responses

- `302`: Redirects to login, consent, callback, or client error with state preserved.

---

[API](https://skmtc.dev/spoonjoy/apis/spoonjoy-api.md) · [All operations](https://skmtc.dev/spoonjoy/apis/spoonjoy-api/llms.txt) · [OpenAPI document](https://skmtc.dev/spoonjoy/apis/spoonjoy-api/revisions/b96eb5d4697d?raw)