Sign in
Identity

Changed on

Opted-in hosted clients receive a browser interaction redirect. Explicit application/json requests retain the headless contract.

get/oidc/authorize

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /oidc/authorize
  • Auth: none required

Query parameters

client_idstring required
redirect_uristring uri required
response_type'code' required
scopestring required
statestring required
code_challengestring
code_challenge_method'S256'
noncestring
promptstring
max_ageinteger
ui_localesstring

Response

Headless consent interaction

redirect_tostring uri required

Changes

  • f11fddb3d766Revision changes
    • info

      the query request parameter code_challenge became optional

    • info

      the query request parameter code_challenge_method became optional

  • 3dd88584c2e4Revision changes
    • info

      added the new optional query request parameter max_age

    • info

      added the new optional query request parameter nonce

    • info

      added the new optional query request parameter prompt

    • info

      added the new optional query request parameter ui_locales

    • info

      added the non-success response with the status