# Start authorization flow

> Redirects the user to the authorization page to start the OAuth V2 authorization flow

`GET https://api.light.inc/oauth/authorize`

## Note

This endpoint does not return JSON. It answers 303 See Other with an empty body and a Location header pointing at Light's identity provider, so send the user's browser here rather than calling it from a server. client_id and redirect_uri are required; state is optional and echoed back unchanged on the callback. The scope is fixed by Light ( openid profile email offline_access ) and the user is always shown the login and consent screens; PKCE ( code_challenge ) is not supported and any scope you pass is ignored.

## Authorization

- API key
- Bearer token

See https://light.inc/docs/getting-started/authentication.

## Query parameters

- `redirect_uri` (string)
- `state` (string)
- `client_id` (string)


## Response

This endpoint returns no content.

## Code

```bash
curl -X GET "https://api.light.inc/oauth/authorize" \
  -H "Authorization: Basic YOUR_API_KEY"
```

---

Full page: https://light.inc/docs/api-reference/authorization/start-authorization-flow · Index: https://light.inc/docs/llms.txt