---
title: "Authorization endpoint (user consent)"
method: GET
path: "/api/auth/oauth2/authorize"
tags: ["oauth"]
---

# Authorization endpoint (user consent)

`GET /api/auth/oauth2/authorize`

Browser endpoint where the user approves an agent's access. Use the authorization code + PKCE flow.

## Query parameters

- `response_type` 'code', required
- `client_id` string, required
- `redirect_uri` string, uri, required
- `scope` string
- `state` string
- `code_challenge` string, required
- `code_challenge_method` 'S256', required

## Other responses

- `302` — Redirect to the consent UI, then to redirect_uri with ?code=...&state=...

---

[API](https://skmtc.dev/superset/apis/superset-api.md) · [All operations](https://skmtc.dev/superset/apis/superset-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/superset/superset-api/revisions/dee6e20fae0d/schema)