---
title: "OAuth 2.0 Authorization Endpoint"
method: GET
path: "/oauth/authorize"
tags: ["OAuth"]
---

# OAuth 2.0 Authorization Endpoint

`GET /oauth/authorize`

Implements [RFC 6749 Section 3.1](https://datatracker.ietf.org/doc/html/rfc6749#section-3.1).

This endpoint is used by OAuth 2.0 clients (e.g., Zapier) to obtain an authorization code
on behalf of an authenticated user.

The user must be logged in to Reachr. On success, the user is redirected back to the
provided `redirect_uri` with an authorization `code` and the optional `state`.

## Query parameters

- `client_id` string, required
- `redirect_uri` string, uri, required
- `response_type` 'code', required
- `scope` string
- `state` string
- `code_challenge` string
- `code_challenge_method` 'S256' | 'plain'

## Other responses

- `302` — Redirect back to the client with either an authorization code or an error.
- `400` — Invalid request (e.g., bad redirect URI, invalid scope).
- `401` — Unauthorized client or user not logged in.
- `500` — Server error.

---

[API](https://skmtc.net/reachr/apis/reachr-api-documentation.md) · [All operations](https://skmtc.net/reachr/apis/reachr-api-documentation/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/reachr/reachr-api-documentation/versions/e4f548c8685b/schema)