---
title: "Redirects to an external OAuth provider. Usually for use as clickable links."
method: GET
path: "/authorize"
tags: ["oauth-client"]
---

# Redirects to an external OAuth provider. Usually for use as clickable links.

`GET /authorize`

## Query parameters

- `provider` string, required
- `scopes` string, required
- `invite_token` string
- `redirect_to` string, uri
- `code_challenge_method` 'plain' | 's256'

## Other responses

- `302` — HTTP Redirect to the OAuth identity provider's authorization URL.

## Changes

- **2025-09-22** `f782805361ed` — 2 info
  - api tag `oauth-client` added
  - api tag `oauth` removed
- **2024-08-19** `58e5a1bd0dd3` — 1 warning
  - changed the pattern of the `query` request parameter `provider` from `[^a-zA-Z0-9]+` to `^[a-zA-Z0-9]+$`
- **2023-04-10** `2aee71c18022` — 1 warning
  - deleted the `query` request parameter `flow_type`
- **2023-03-24** `c34c07c83392` — 2 info
  - added the new optional `query` request parameter `code_challenge_method`
  - added the new optional `query` request parameter `flow_type`
- **2023-02-01** `144a34ca6d74` — 2 warning, 2 info
  - changed the pattern of the `query` request parameter `provider` from `^[a-zA-Z0-9]+$` to `[^a-zA-Z0-9]+`
  - deleted the `query` request parameter `code_challenge_method`
  - api tag `oauth` added
  - api tag `oauth-client` removed

[Change history](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/changes/authorize/get.md)

---

[API](https://skmtc.dev/supabase/apis/supabase-auth-rest-api.md) · [All operations](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/supabase/supabase-auth-rest-api/revisions/2e2a74a7459f/schema)