OAuth 2.1 authorization endpoint

PATCH 
/api/auth/oauth2/authorize

Redirects the user to /sign-in (if not authenticated) or /consent (if first visit), then redirects back to the client redirect_uri with ?code=&state=. PKCE required.

Request

Responses

302

Redirect to login, consent, or client redirect_uri.

400

invalid_request / invalid_redirect_uri / unsupported_response_type

401

invalid_client (unknown client_id)