The Authorization Request
Construct PKCE authorization URLs, code challenges, and state parameters.
The Authorization Request
GET/oauth/authorize
OAuth Bearer Token
The authorization request initiates the browser-based OAuth consent flow on https://app.zorveus.com/oauth/authorize.
Query Parameters
response_typestringrequired
Must be set to code.
client_idstringrequired
Your registered application Client ID (zrv_client_...).
redirect_uristringrequired
URL-encoded callback destination matching your registered list.
scopestringrequired
Space-separated permissions (e.g. inference:write).
code_challengestringrequired
Base64URL-encoded SHA-256 hash of your plaintext code_verifier.
code_challenge_methodstringrequired
Must be set to S256.
statestringrequired
High-entropy CSRF mitigation token verified upon callback return.
Example Authorization URL
https://app.zorveus.com/oauth/authorize?response_type=code&client_id=zrv_client_your_client_id&redirect_uri=https%3A%2F%2Fmyapp.com%2Fcallback&scope=inference%3Awrite&code_challenge=E9Melhoa2OwvFrGMTJguCH5ZiXV6lURbI7e1J0q_ges&code_challenge_method=S256&state=94a1b08c99e2Was this page helpful?
Edit this page on GitHub