---
title: "Oauth Authorize"
method: POST
path: "/oauth/authorize"
---

# Oauth Authorize

`POST /oauth/authorize`

## Request

- Base URL: `https://api.storyflo.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.storyflo.com/oauth/authorize`
- Auth: none declared

Authorization endpoint. Frontend collects user consent, then POSTs
here with the listener_token (proving the human is signed in) and
PKCE challenge. Returns the auth code; frontend redirects the agent
back to its redirect_uri with code + state.

The actual consent UI lives at /oauth/consent on the frontend; this
endpoint is the server-side step that mints the code after the user
clicks Authorize.

## Request body

- AuthorizeRequest
  - `response_type` string, required
  - `client_id` string, required
  - `redirect_uri` string, required
  - `scope` string
  - `state` string, nullable
  - `code_challenge` string, required
  - `code_challenge_method` string
  - `listener_token` string, required
  - `referral_token` string, nullable

## Response `200`

Successful Response

- object

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/storyflo/apis/storyflo-inference-router.md) · [All operations](https://skmtc.dev/storyflo/apis/storyflo-inference-router/llms.txt) · [OpenAPI document](https://skmtc.dev/storyflo/apis/storyflo-inference-router/revisions/c3a1a735ac7a?raw)