Initiates a request for authorization of a Connected App to access a Member's account.
Call this endpoint using the query parameters from an OAuth Authorization request. This endpoint validates various fields (scope, client_id, redirect_uri, prompt, etc...) are correct and returns relevant information for rendering an OAuth Consent Screen.
This endpoint returns:
- A public representation of the Connected App requesting authorization
- Whether explicit consent must be granted before proceeding with the authorization
- A list of scopes the Member has the ability to grant the Connected App
Use this response to prompt the Member for consent (if necessary) before calling the Submit OAuth Authorization endpoint.
Exactly one of the following must be provided to identify the Member granting authorization:
- organization_id + member_id
- session_token
- session_jwt
If a session_token or session_jwt is passed, the OAuth Authorization will be linked to the Member's session for tracking purposes. One of these fields must be used if the Connected App intends to complete the Exchange Access Token flow.