---
title: "Validate the authorization request and send the browser to the sign-in page (JSON when Accept: application/json)"
method: GET
path: "/api/oauth/authorize"
tags: ["oauth"]
---

# Validate the authorization request and send the browser to the sign-in page (JSON when Accept: application/json)

`GET /api/oauth/authorize`

## Request

- Base URL: `https://api.wizbi.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.wizbi.ai/api/oauth/authorize`
- Auth: none declared

## Query parameters

- `response_type` string, required
- `client_id` string, required
- `redirect_uri` string, required
- `code_challenge` string
- `code_challenge_method` string
- `scope` string
- `state` string
- `resource` string
- `iss` string

## Response `200`

Validated parameters (JSON clients).

- object

## Other responses

- `302`: Redirect to the sign-in page — or, once the client and its redirect URI are valid, back to the client with `error`, `state` and `iss` (RFC 6749 §4.1.2.1, RFC 9207).
- `400`: Invalid request (unknown client, unregistered redirect URI).

---

[API](https://skmtc.dev/wizbi/apis/wizbi-core-api.md) · [All operations](https://skmtc.dev/wizbi/apis/wizbi-core-api/llms.txt) · [OpenAPI document](https://skmtc.dev/wizbi/apis/wizbi-core-api/revisions/5a47416c82ec?raw)