跳转到主要内容
GET
GET /v1/oauth/authorize

授权

gproxy_session
string
cookie
必填

查询参数

client_id
string
默认值:""
code_challenge
string
默认值:""

The base64url SHA-256 of the client's verifier (RFC 7636 §4.2).

code_challenge_method
string
默认值:""

Must be S256.

redirect_uri
string
默认值:""

Matched exactly against oauth_clients.redirect_uris.

response_type
string
默认值:""

Must be code. This issuer has no implicit and no hybrid flow.

scope
string
默认值:""

Space-delimited, per RFC 6749 §3.3. Empty asks for no scope.

state
string | null

Opaque client value, echoed back untouched on both outcomes. It is the client's CSRF defence and this issuer never interprets it.

响应

Success

What a consent screen renders, once the request has been found valid.

Returned by Issuer::authorize_details [blocked], which validates everything an approval would validate. A screen built from this can therefore show the user a decision that will actually be honoured rather than one that fails after they take it.

client_id
string
必填
client_name
string
必填

oauth_clients.name, which is what the user recognises. The id is a string a binary was compiled with and means nothing to them.

redirect_uri
string
必填

The exact registered redirect URI the code would be delivered to.

scopes
string[]
必填

The requested scopes, already split on whitespace and deduplicated.

state
string | null
必填
user_id
string
必填

The user a consent would bind the grant to.