v47

latestOpenAPI 3.0.3MIT Licenseraw.githubusercontent.com2026-08-015915132.9 KB
oauth-server

OAuth 2.1 Authorization endpoint

Initiates the OAuth authorization code flow. Redirects users to login and authorize the requesting application. Only available when OAuth server is enabled (set GOTRUE_OAUTH_SERVER_ENABLED=true for self-hosted or enable in Supabase Dashboard).

get/oauth/authorize

Query parameters

response_type'code' required
client_idstring required

The client identifier

redirect_uristring uri required

Client's redirect URI

scopestring

Requested access scope

statestring

State parameter for CSRF protection

code_challengestring required

PKCE code challenge

code_challenge_method'S256' required

PKCE code challenge method