Skip to main content
GET
Authorization endpoint

Query Parameters

response_type
string
required

e.g. code

Example:

"code"

client_id
string
required

Public client id

Example:

"dev-console"

redirect_uri
string
required

Must be pre-registered

Example:

"https://developers.tktchurch.com/callback"

scope
string

Space-separated scopes

Example:

"openid profile email"

state
string

Opaque CSRF value

code_challenge
string

S256 challenge

code_challenge_method
string

Must be S256 — plain is rejected

Example:

"S256"

nonce
string

OIDC nonce

request_uri
string

PAR replay

resource
string

RFC 8707 resource indicator

Response

JSON consent challenge, or 302 redirect to the login page