Skip to main content
GET
Authorization Endpoint
Redirect the browser to this endpoint to start the Authorization Code flow. If the user is not already authenticated, they will be sent to the Verify Group login page with the original parameters preserved. Required for Authorization Code flow:
  1. Generate a random code_verifier (43–128 chars)
  2. Compute code_challenge = BASE64URL(SHA256(code_verifier))
  3. Redirect user to this endpoint
  4. After login, user is redirected to your redirect_uri with ?code=...&state=...
  5. Exchange the code at the Token endpoint
code
required
Must be code.
string
required
Your OAuth App client_id.
string
required
Must exactly match a redirect URI registered with your OAuth App.
string
Space-separated scopes. Supported: openid profile email org:read kyc:read claims:read voice:read evidence:read
string
Opaque CSRF protection value. Returned unchanged in the redirect.
string
PKCE challenge — BASE64URL(SHA256(code_verifier)). Required for public clients.
S256
Must be S256.
string
OIDC replay protection nonce. Included in the id_token if provided.