oauth
Initiate OAuth2 authorization
Validates authorization request parameters and redirects to the frontend consent page per RFC 6749.
get/oauth/authorize
Query parameters
response_typestring required
Must be 'code'
client_idstring required
OAuth2 client ID
redirect_uristring required
Redirect URI registered with the client
code_challengestring required
PKCE code challenge
code_challenge_methodstring required
PKCE method, must be 'S256'
statestring
Opaque state value to prevent CSRF