Authorize (Consent Page)

Initiates the OAuth 2.0 authorization code flow. Redirects the user to a consent page
where they can approve or deny access for the requesting client.
First-party clients skip the consent page and redirect immediately.
Requires the user to be logged in (session auth).
Use PKCE (code_challenge with S256 method) for public clients.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Query Params
string
enum
required

Must be 'code'

Allowed:
string
required

The client ID from registration

string
required

Must match a registered redirect URI

string

Space-separated list of scopes (e.g. 'listings:read reservations:read')

string

Opaque value for CSRF protection, returned in the redirect

string

PKCE code challenge (Base64URL-encoded SHA-256 hash of code_verifier)

string
enum

PKCE challenge method, must be 'S256'

Allowed:
Responses
200

Consent page rendered (HTML)

302

Redirect to redirect_uri with authorization code (first-party clients)

400

Invalid request (bad client_id, redirect_uri, or response_type)

Language
Credentials
LoadingLoading…
Response
Click Try It! to start a request and see the response here!