---
title: "Start the upstream OAuth authorization for a pending flow"
method: GET
path: "/api/oauth/per-user/flows/{id}/start"
tags: ["OAuth"]
---

# Start the upstream OAuth authorization for a pending flow

`GET /api/oauth/per-user/flows/{id}/start`

Reconstructs the upstream provider's authorize URL for a pending OAuth
flow. The auth-landing page redirects the browser to that URL; the user
completes upstream auth; the upstream provider redirects back to
`/api/oauth/callback`, which exchanges the code for tokens server-side
and stores them against the flow's identity.

Returns 410 if the flow is no longer pending (expired / completed /
failed). The caller should restart the original action to get a fresh
flow.

## Path parameters

- `id` string, required

## Response `200`

Authorize URL

- object
  - `authorize_url` string, required — Where to send the browser to complete upstream OAuth

## Other responses

- `401` — Unauthorized — missing or invalid credentials
- `404` — Resource not found
- `410` — Flow is no longer pending; restart the original action
- `500` — Internal server error
- `503` — OAuth provider not configured

---

[API](https://skmtc.net/getbifrost/apis/bifrost-api.md) · [All operations](https://skmtc.net/getbifrost/apis/bifrost-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/getbifrost/bifrost-api/versions/f8cab88f64ea/schema)