Skip to main content
GET
Authorize (Authorization Code flow)

Query Parameters

response_type
string
required

Must be code.

client_id
string
required

The app's client ID.

redirect_uri
string
required

The URL to redirect back to; must match a redirect URI configured on the app.

scope
string
required

Space-separated scopes to request.

state
string

An opaque value echoed back on the redirect; use it to maintain state and prevent CSRF.

prompt
string

Force login (re-authenticate) or consent (re-consent).

Response

302

Redirect to redirect_uri with the authorization code and state.