Skip to main content
GET
User Login - Authorization Code Flow with PKCE

Query Parameters

ReturnUrl
string
required

The OAuth callback URL (typically /connect/authorize/callback)

response_type
enum<string>
required

Must be "code" for authorization code flow

Available options:
code
client_id
string
required

The client identifier for your mobile app (e.g., clover-cmc-mobile)

scope
string
required

The API scopes requested (e.g., clearline_api)

redirect_uri
string
required

The URI where the authorization code will be sent (e.g., clover://auth-callback)

code_challenge
string
required

BASE64URL(SHA256(code_verifier)) - A hashed value derived from your random code_verifier

code_challenge_method
enum<string>
required

The hashing method used for code_challenge - must be "S256"

Available options:
S256

Response

Redirect to login page or callback URI with authorization code