---
title: "Google Authorize"
method: GET
path: "/api/auth/google/authorize"
tags: ["auth"]
---

# Google Authorize

`GET /api/auth/google/authorize`

## Request

- Base URL: `https://api.tintin-x.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.tintin-x.com/api/auth/google/authorize`
- Auth: none declared

Redirect to Google OAuth consent screen.

`redirect_to` lets an allowlisted standalone app (nail.tintin-x.com) ask
the callback to return the user to its own host instead of app_url.
Rejected unless it matches `_ALLOWED_OAUTH_REDIRECT_BASES`.

`signup_source` is the browser's base64url attribution blob. Signing it into
the state is the only way it survives the Google round-trip — a Google
sign-in that turns out to be a first-time user creates the account in the
callback, with no further contact with the originating page.

## Query parameters

- `client` string, nullable
- `redirect_to` string, nullable
- `signup_source` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tintin-x/apis/tintin-api.md) · [All operations](https://skmtc.dev/tintin-x/apis/tintin-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tintin-x/apis/tintin-api/revisions/8839a8d0a66c?raw)