OAuth Integration
Authorization request
Build an OAuth authorization URL with PKCE, scopes, and state.
GET/oauth/authorize
Send the user’s browser to https://app.zorveus.com/oauth/authorize with these query parameters:
response_typestringrequired
Use
code.client_idstringrequired
Use the registered app client ID.
redirect_uristringrequired
Use an exact registered redirect URI.
scopestringrequired
Provide space-separated scopes, including
inference:write and at least one models: scope.code_challengestringrequired
Provide the base64url-encoded SHA-256 digest of the PKCE verifier.
code_challenge_methodstringrequired
Use
S256.statestringoptional
Provide a high-entropy value and verify it when the browser returns. Although the API permits omission, clients should use it for CSRF protection.
https://app.zorveus.com/oauth/authorize?response_type=code&client_id=zrv_client_your_client_id&redirect_uri=https%3A%2F%2Fexample.com%2Fcallback&scope=inference%3Awrite%20models%3A*&code_challenge=YOUR_BASE64URL_CHALLENGE&code_challenge_method=S256&state=YOUR_RANDOM_STATEThe requested scopes and models must fit the app’s registered policy. Do not put a client secret in this browser URL.
Was this page helpful?
Edit this page on GitHub