---
title: "Get Authorization Url"
method: POST
path: "/get-authorization-url"
tags: ["developers"]
---

# Get Authorization Url

`POST /get-authorization-url`

Gets authorization url

## Headers

- `Authorization` string
- `AuthorizationOxdId` string

## Request body

- object
  - `oxd_id` string, required
  - `scope` string[]
  - `acr_values` string[]
  - `prompt` string
  - `state` string
  - `nonce` string
  - `redirect_uri` string
  - `response_types` string[] — Provide a list of the OAuth 2.0 response_type values that the Client is declaring that it will restrict itself to using. If omitted, the default is that the Client will use only the code response type.
  - `custom_parameters` object
  - `params` object

## Response `200`

OK

- object
  - `authorization_url` string, required

## Other responses

- `400` — Invalid parameters are provided to endpoint.
- `403` — Forbidden. Invalid access token provided in Authorization header.
- `500` — Internal error occured. Please check oxd-server.log file for details (usually located in /var/log/oxd-server/oxd-server.log).

---

[API](https://skmtc.net/gluufederation/apis/oxd-server.md) · [All operations](https://skmtc.net/gluufederation/apis/oxd-server/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gluufederation/oxd-server/versions/33ca9e18c54b/schema)