---
title: "Start an authorization code flow"
method: GET
path: "/zephr/oauth2"
tags: ["Third-Party Authentication"]
---

# Start an authorization code flow

`GET /zephr/oauth2`

## Request

- Base URL: `https://demo-site`
- URL: `https://demo-site/zephr/oauth2`
- Auth: one of:
  - API key in cookie `blaize_session`
  - API key in query parameter `jwt`
  - API key in header `x-blaize-jwt`
  - API key in header `x-zephr-jwt`
  - HTTP bearer
  - API key in cookie `blaize_jwt`

Starts OAuth2 Authorization Code Flow. The resource owner will be authenticated and be presented with the third-party application access request.

## Query parameters

- `client_id` string, required
- `response_type` string, required
- `redirect_uri` string, required
- `scope` string, required
- `state` string, required

## Other responses

- `302`: Found

---

[API](https://skmtc.dev/zuora/apis/zuora-2.md) - [All operations](https://skmtc.dev/zuora/apis/zuora-2/llms.txt) - [OpenAPI document](https://skmtc.dev/zuora/apis/zuora-2/revisions/678190d04c40?raw)