Authorization Request

GET 
/authz-srv/authz

Authorization Request

This API initiates the OAuth 2.0 / OpenID Connect authorization process. It can be used to perform the following flows:

• Authorization Code Flow - Use response_type=code
• Authorization Code Flow with PKCE - Use response_type=code with code_challenge and code_challenge_method
• Pushed Authorization Request (PAR) - Use request_uri parameter (obtained from /authz-srv/par endpoint)
• Implicit Flow - Use response_type=token (deprecated, not recommended)

The flow type is determined by the response_type parameter. All parameters are passed as query parameters in the URL, except when using PAR where request_uri is used instead.

Request

Responses

302

Redirect response to redirect_uri with authorization code and state as query param or fragment.

404

Not Found