Xsolla-logo

OAuth 2.0 Authorize

get/oauth2/auth
Request
query Parameters
response_type
required
string

Will be set to code, indicating that the application expects to receive an authorization code if successful.

Value: "code"
client_id
required
integer

Your application ID. Get it after creating an OAuth 2.0 client.

redirect_uri
required
string

This URL must match one of the URLs the developer registered when creating the application, and the authorization server should reject the request if it does not match. To set up this parameter, contact your Account Manager.

scope
required
string

The request may have one or more scope values indicating additional access requested by the application. The authorization server will need to display the requested scopes to the user.

state
required
string

The state parameter is used by the application to store request-specific data and/or prevent CSRF attacks. The authorization server must return the unmodified state value back to the application. This is the recommended parameter.

audience
required
string

The audience parameter may contain multiple strings separated by a url-encoded space (+ or %20). The audience values themselves must also be url encoded.

popup
boolean
Default: false

If true is passed method will redirect to widget at first and then to partner's callback. If false, method will redirect straight to partner's callback.

code_challenge
string

Generated challenge from the code_verifier (https://datatracker.ietf.org/doc/html/rfc7636#section-4-2).

code_challenge_method
string

Method used to generate the challenge. For now, you can only use the method S256 to generate code_challenge.

Value: "S256"
Responses
302

Redirection

400

Bad Request

404

Not Found

418

I’m a teapot

422

Unprocessable Entity

429

Too Many Requests

Request samples 
Response samples 
{
  • "error": {
    }
}