Skip to main content
POST
Pushed authorization request (RFC 9126)

Authorizations

Authorization
string
header
required

Basic authentication header of the form Basic <encoded-value>, where <encoded-value> is the base64-encoded string username:password.

Body

application/json
response_type
string
required

Must be code

Example:

"code"

client_id
string
required

Must match the authenticated client

redirect_uri
string
required

Must be pre-registered

scope
string

Space-separated scopes

state
string

Opaque CSRF value echoed back

code_challenge
string

S256 PKCE challenge

code_challenge_method
string

Must be S256

Example:

"S256"

nonce
string

OIDC nonce

Response

Success

request_uri
string
expires_in
integer
Example:

90