> For the complete documentation index, see [llms.txt](https://docs.petje.af/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.petje.af/petje.af-api/authentication/authorize.md).

# Authorize

## Authorize

<mark style="color:blue;">`GET`</mark> `https://petjeaf.com/oauth2/authorize`

On this page on the Petje.af platform the logged in user can grant the authorization to your client application for the scopes you have requested. \
\
Petje.af will then redirect the user back to the `redirect_uri` you have specified. The `redirect_uri` will be appended with a `code` parameter, which will contain the `authorization code`. You should then exchange the `authorization code` for an `access token` and a `refresh token` using the tokens endpoint.

#### Path Parameters

| Name           | Type   | Description                                                                                                                               |
| -------------- | ------ | ----------------------------------------------------------------------------------------------------------------------------------------- |
| redirect\_uri  | string | The URL the user is send back to ones the request has been authorized. If given, it must macht the URL you set when registering your app. |
| scope          | string | A space separated list of permissions your app requires.                                                                                  |
| state          | string | A random string generated by your app to prevent CSRF attacks                                                                             |
| response\_type | string | <p>Petje.af only replies with code responses<br><br>Possible values: <code>code</code></p>                                                |
| client\_id     | string | The client ID of your client application                                                                                                  |

{% tabs %}
{% tab title="301 " %}

```
After granting authorization the user will be redirected to your redirect_uri
with the following query parameters:

code: The authorization code with which you can request an access token
state: The random string you've sent with your request to prevent CSRF attacks
```

{% endtab %}
{% endtabs %}