OAuth 2.0 Authorization Endpoint (Unauthenticated)

Unauthenticated authorization endpoint (RFC 6749 section 3.1). Validates the client,
redirect URI, PKCE parameters, and scopes. Creates a pending authorization request
and always redirects to the consent UI.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Query Params
string
required

Must be "code" for the authorization code flow.

string
required

The client identifier obtained during registration.

uri
required

Must match one of the client's registered redirect URIs.

string

Space-separated list of requested scopes.

string

Opaque value for CSRF protection, returned unchanged in the redirect.

string
required

PKCE code challenge (RFC 7636).

string
required

Must be "S256".

string

Space-separated list of prompt directives. Supported value: "consent".

Responses
302

Always redirects to the consent UI with authorization_request_id and
client metadata as query parameters.

Language
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json