---
title: "Redirects to an external OAuth provider. Usually for use as clickable links."
method: GET
path: "/authorize"
tags: ["oauth"]
---

# Redirects to an external OAuth provider. Usually for use as clickable links.

`GET /authorize`

## Query parameters

- `provider` string, required
- `scopes` string, required
- `invite_token` string
- `redirect_to` string, uri

## Other responses

- `302` — HTTP Redirect to the OAuth identity provider's authorization URL.

## Changes

- **2023-02-01** `144a34ca6d74` — 2 warning, 2 info
  - changed the pattern of the `query` request parameter `provider` from `^[a-zA-Z0-9]+$` to `[^a-zA-Z0-9]+`
  - deleted the `query` request parameter `code_challenge_method`
  - api tag `oauth` added
  - api tag `oauth-client` removed

[Change history](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/changes/authorize/get.md)

---

[API](https://skmtc.dev/supabase/apis/supabase-auth-rest-api.md) · [All operations](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/supabase/supabase-auth-rest-api/revisions/144a34ca6d74/schema)