Authorization Code Request

curl --request GET \
  --url 'https://oauth.msu.io/oauth/authorize?client_id={CLIENT_ID}&redirect_uri={REDIRECT_URI}&response_type=code&state={STATE}'

const params = new URLSearchParams({
  client_id: '{CLIENT_ID}',
  redirect_uri: '{REDIRECT_URI}',
  response_type: 'code',
  state: '{STATE}'
});
window.location.href = `https://oauth.msu.io/oauth/authorize?${params}`;

import urllib.parse

params = urllib.parse.urlencode({
  "client_id": "{CLIENT_ID}",
  "redirect_uri": "{REDIRECT_URI}",
  "response_type": "code",
  "state": "{STATE}"
})
redirect_url = f"https://oauth.msu.io/oauth/authorize?{params}"

HTTP/1.1 302 Found
Location: {REDIRECT_URI}?code={AUTHORIZATION_CODE}&state={STATE}

GET

oauth

authorize

curl --request GET \
  --url 'https://oauth.msu.io/oauth/authorize?client_id={CLIENT_ID}&redirect_uri={REDIRECT_URI}&response_type=code&state={STATE}'

const params = new URLSearchParams({
  client_id: '{CLIENT_ID}',
  redirect_uri: '{REDIRECT_URI}',
  response_type: 'code',
  state: '{STATE}'
});
window.location.href = `https://oauth.msu.io/oauth/authorize?${params}`;

import urllib.parse

params = urllib.parse.urlencode({
  "client_id": "{CLIENT_ID}",
  "redirect_uri": "{REDIRECT_URI}",
  "response_type": "code",
  "state": "{STATE}"
})
redirect_url = f"https://oauth.msu.io/oauth/authorize?{params}"

HTTP/1.1 302 Found
Location: {REDIRECT_URI}?code={AUTHORIZATION_CODE}&state={STATE}

Redirects the user’s browser to authenticate and grant permissions. On success, issues a one-time Authorization Code to the registered redirect_uri.

Query parameters

string

required

Unique client identifier issued during app registration.

string

required

Callback URL to receive the Authorization Code. Must exactly match the URI registered with the OAuth client.

string

required

Must be fixed value code.

string

Recommended. Random unique string for CSRF protection. Returned as-is in the redirect callback.

string

PKCE code challenge (43–128 chars). Required if code_challenge_method is provided.

string

PKCE method (plain or S256). Required if code_challenge is provided.

Response

On success, the user’s browser is redirected to the redirect_uri with the Authorization Code. On error, the browser is redirected to an error page.

string

One-time Authorization Code. Pass this to POST /oauth/token to obtain tokens.

string

Echoed back from the request. Use this to verify the response integrity.

curl --request GET \
  --url 'https://oauth.msu.io/oauth/authorize?client_id={CLIENT_ID}&redirect_uri={REDIRECT_URI}&response_type=code&state={STATE}'

const params = new URLSearchParams({
  client_id: '{CLIENT_ID}',
  redirect_uri: '{REDIRECT_URI}',
  response_type: 'code',
  state: '{STATE}'
});
window.location.href = `https://oauth.msu.io/oauth/authorize?${params}`;

import urllib.parse

params = urllib.parse.urlencode({
  "client_id": "{CLIENT_ID}",
  "redirect_uri": "{REDIRECT_URI}",
  "response_type": "code",
  "state": "{STATE}"
})
redirect_url = f"https://oauth.msu.io/oauth/authorize?{params}"

HTTP/1.1 302 Found
Location: {REDIRECT_URI}?code={AUTHORIZATION_CODE}&state={STATE}

⌘I

MSU Builder

MSU Resources

MSU OPEN API

Query parameters

Response

​Query parameters

​Response

Query parameters

Response