Authorization Code Request

curl --request GET \
  --url 'https://oauth.msu.io/oauth/authorize?client_id={CLIENT_ID}&redirect_uri={REDIRECT_URI}&response_type=code&state={STATE}'

const params = new URLSearchParams({
  client_id: '{CLIENT_ID}',
  redirect_uri: '{REDIRECT_URI}',
  response_type: 'code',
  state: '{STATE}'
});
window.location.href = `https://oauth.msu.io/oauth/authorize?${params}`;

import urllib.parse

params = urllib.parse.urlencode({
  "client_id": "{CLIENT_ID}",
  "redirect_uri": "{REDIRECT_URI}",
  "response_type": "code",
  "state": "{STATE}"
})
redirect_url = f"https://oauth.msu.io/oauth/authorize?{params}"

HTTP/1.1 302 Found
Location: {REDIRECT_URI}?code={AUTHORIZATION_CODE}&state={STATE}

GET

oauth

authorize

curl --request GET \
  --url 'https://oauth.msu.io/oauth/authorize?client_id={CLIENT_ID}&redirect_uri={REDIRECT_URI}&response_type=code&state={STATE}'

const params = new URLSearchParams({
  client_id: '{CLIENT_ID}',
  redirect_uri: '{REDIRECT_URI}',
  response_type: 'code',
  state: '{STATE}'
});
window.location.href = `https://oauth.msu.io/oauth/authorize?${params}`;

import urllib.parse

params = urllib.parse.urlencode({
  "client_id": "{CLIENT_ID}",
  "redirect_uri": "{REDIRECT_URI}",
  "response_type": "code",
  "state": "{STATE}"
})
redirect_url = f"https://oauth.msu.io/oauth/authorize?{params}"

HTTP/1.1 302 Found
Location: {REDIRECT_URI}?code={AUTHORIZATION_CODE}&state={STATE}

Redirects the user’s browser to authenticate and grant permissions. On success, issues a one-time Authorization Code to the registered redirect_uri.

Query parameters

client_id

string

required

Unique client identifier issued during app registration.

redirect_uri

string

required

Callback URL to receive the Authorization Code. Must exactly match the URI registered with the OAuth client.

response_type

string

required

Must be fixed value code.

state

string

Recommended. Random unique string for CSRF protection. Returned as-is in the redirect callback.

code_challenge

string

PKCE code challenge (43–128 chars). Required if code_challenge_method is provided.

code_challenge_method

string

PKCE method (plain or S256). Required if code_challenge is provided.

Response

On success, the user’s browser is redirected to the redirect_uri with the Authorization Code. On error, the browser is redirected to an error page.

code

string

One-time Authorization Code. Pass this to POST /oauth/token to obtain tokens.

state

string

Echoed back from the request. Use this to verify the response integrity.

curl --request GET \
  --url 'https://oauth.msu.io/oauth/authorize?client_id={CLIENT_ID}&redirect_uri={REDIRECT_URI}&response_type=code&state={STATE}'

const params = new URLSearchParams({
  client_id: '{CLIENT_ID}',
  redirect_uri: '{REDIRECT_URI}',
  response_type: 'code',
  state: '{STATE}'
});
window.location.href = `https://oauth.msu.io/oauth/authorize?${params}`;

import urllib.parse

params = urllib.parse.urlencode({
  "client_id": "{CLIENT_ID}",
  "redirect_uri": "{REDIRECT_URI}",
  "response_type": "code",
  "state": "{STATE}"
})
redirect_url = f"https://oauth.msu.io/oauth/authorize?{params}"

HTTP/1.1 302 Found
Location: {REDIRECT_URI}?code={AUTHORIZATION_CODE}&state={STATE}

MSU OAuth 2.0 Guide Token Introspection

⌘I

MSU Builder

MSU Resources

MSU OPEN API

Query parameters

Response

​Query parameters

​Response

Query parameters

Response