OAuth

Authorization endpoint (start the auth-code flow).

RFC 6749 §4.1.1. Validates the request, then redirects the logged-in user to the consent screen; on approval the browser is redirected back to redirect_uri with a single-use code. PKCE is mandatory (code_challenge_method=S256). An unknown client or unregistered redirect_uri returns 400 (no redirect); other parameter errors redirect back with ?error=.

get/api/oauth/authorize

Request

  • Base URL: https://app.tracepass.eu
  • URL: https://app.tracepass.eu/api/oauth/authorize
  • Auth: none required

Query parameters

response_type'code' required
client_idstring required
redirect_uristring uri required
scopestring

Space-delimited scopes (narrowed to the client's ceiling).

statestring
code_challengestring required

base64url SHA-256 of the code_verifier.

code_challenge_method'S256' required

Changes

No recorded changes to this operation across all 1 revision of this API.