Start or continue an OAuth/OIDC authorization request.

GET

/authorize

Code sample: Shell / cURL

curl --request GET \
  --url https://auth.example.com/authorize

Rejects response types that are disabled by the tenant OIDC policy. Internal consent continuations are accepted only from the originating live session and browser binding.

Parameters

Query Parameters

client_id

string

redirect_uri

string

response_type

string

scope

string

state

string

ui_locales

string

Space-separated BCP 47 locale preferences in priority order. The first supported value is forwarded to Login UI as a transaction-scoped hint and does not overwrite the end-user’s saved language preference.

Responses

200

Successful response. The representation can be JSON, HTML, or a redirect.

302

Redirect response.

503

Error response.

Media type application/json

object

error

string

error_description

string

message

string

webauthn_signal

Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.

object

unknown_credential

boolean

key

additional properties

Example ^generated

{
  "error": "example",
  "error_description": "example",
  "message": "example",
  "webauthn_signal": {
    "unknown_credential": true
  }
}