跳转到主要内容
POST
POST /v1/oauth/authorize

授权

gproxy_session
string
cookie
必填

查询参数

client_id
string
默认值:""
code_challenge
string
默认值:""

The base64url SHA-256 of the client's verifier (RFC 7636 §4.2).

code_challenge_method
string
默认值:""

Must be S256.

redirect_uri
string
默认值:""

Matched exactly against oauth_clients.redirect_uris.

response_type
string
默认值:""

Must be code. This issuer has no implicit and no hybrid flow.

scope
string
默认值:""

Space-delimited, per RFC 6749 §3.3. Empty asks for no scope.

state
string | null

Opaque client value, echoed back untouched on both outcomes. It is the client's CSRF defence and this issuer never interprets it.

请求体

application/json
decision
enum<string>
必填

What the person at the consent screen chose.

Named ConsentDecision rather than Decision because snapshot::Decision [blocked] is the permission evaluator's verdict, and the two appear in the same files.

可用选项:
approve,
deny

响应

Success

location
string
必填
outcome
object
必填

The result of a consent decision: in both directions, a redirect back to the client.