OAuth 2.0
OAuth 2.0 Authorization Endpoint (Unauthenticated)
get
/oauth/authorizeUnauthenticated authorization endpoint (RFC 6749 section 3.1). Validates the client, redirect URI, PKCE parameters, and scopes. Creates a pending authorization request and always redirects to the consent UI.
Parameters 8
response_typequeryrequiredMust be "code" for the authorization code flow.
string
client_idqueryrequiredThe client identifier obtained during registration.
string
redirect_uriqueryrequiredMust match one of the client's registered redirect URIs.
stringformat
"uri"scopequerySpace-separated list of requested scopes.
string
statequeryOpaque value for CSRF protection, returned unchanged in the redirect.
string
code_challengequeryrequiredPKCE code challenge (RFC 7636).
string
code_challenge_methodqueryrequiredMust be "S256".
string
promptquerySpace-separated list of prompt directives. Supported value: "consent".
string
bash
Sample request1curl --request GET 'https://api.eu-west-1.aws.dash0.com/oauth/authorize?response_type=code&client_id=example&redirect_uri=https%3A%2F%2Fexample.com&code_challenge=E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM&code_challenge_method=S256'
Responses
Always redirects to the consent UI with authorization_request_id and client metadata as query parameters.