---
title: "Authorization endpoint: sign in + consent page (HTML)"
method: GET
path: "/oauth/authorize"
tags: ["OAuth"]
---

# Authorization endpoint: sign in + consent page (HTML)

`GET /oauth/authorize`

## Request

- Base URL: `https://whenmeet.me`
- URL: `https://whenmeet.me/oauth/authorize`
- Auth: none required

Query: response_type=code, client_id, redirect_uri, code_challenge, code_challenge_method=S256 (required), state, scope ("read", "write" or both; default both), resource (must be <origin>/mcp). Allow → 302 redirect_uri?code=…&state=…&iss=…; Deny → error=access_denied.

## Response `200`

Consent or sign-in page.

## Other responses

- `302`: Error redirect to the client.
- `400`: Unknown client or redirect_uri mismatch (no redirect).

---

[API](https://skmtc.dev/whenmeet/apis/whenmeet-me-api.md) · [All operations](https://skmtc.dev/whenmeet/apis/whenmeet-me-api/llms.txt) · [OpenAPI document](https://skmtc.dev/whenmeet/apis/whenmeet-me-api/revisions/202b80022215?raw)