---
title: "Authorize Endpoint"
method: GET
path: "/authorize"
tags: ["OAuth"]
---

# Authorize Endpoint

`GET /authorize`

RFC 6749 Authorization endpoint with PKCE (S256 only).

If an external IdP is configured, redirects to the upstream provider.
Otherwise returns an error (direct login requires a separate credential exchange).

## Query parameters

- `response_type` string, required
- `client_id` string, required
- `redirect_uri` string, required
- `code_challenge` string, required
- `code_challenge_method` string, required
- `scope` string
- `state` string, nullable
- `nonce` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `400` — Bad Request
- `422` — Unprocessable Entity
- `500` — Internal Server Error
- `503` — Service Unavailable

---

[API](https://skmtc.net/jentic/apis/jentic-control-plane-api.md) · [All operations](https://skmtc.net/jentic/apis/jentic-control-plane-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/jentic/jentic-control-plane-api/versions/ff371f19960a/schema)