Authorization Endpoint

GET

/oidc/authorize

const url = 'https://auth.timetonic.com/oidc/authorize?client_id=example&redirect_uri=https%3A%2F%2Fexample.com&response_type=code&scope=example&state=example&code_challenge=example&code_challenge_method=S256';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url 'https://auth.timetonic.com/oidc/authorize?client_id=example&redirect_uri=https%3A%2F%2Fexample.com&response_type=code&scope=example&state=example&code_challenge=example&code_challenge_method=S256'

Start the OIDC Authorization Code + PKCE flow. Validates client, redirect_uri, PKCE challenge, then either authenticates the user or returns a 401 with an oidc_request_id and login_endpoint = /login for the web login flow that resumes the same authorization request.

Parameters

Query Parameters

client_id

required

string

redirect_uri

required

string format: uri

response_type

required

string

Allowed values: code

scope

required

string

Space-separated scopes (e.g. “openid profile email offline_access”)

state

required

string

nonce

string

code_challenge

required

string

code_challenge_method

required

string

Allowed values: S256

Responses

302

Redirect to redirect_uri with authorization code

401

Authentication required (returns oidc_request_id)