Start Authorization Code Flow

Redirects the user to authenticate and consent to the requested access. On successful authorization, the user is redirected to the registered redirect_uri with an authorization code. Include the registered client and redirect URI, requested scope, and PKCE challenge parameters; use the returned code with the token endpoint to obtain tokens.

Query Params
string
required

Your registered client identifier.

string
required

Space-separated list of requested scopes. Include openid; request only scopes supported for your client.

string
required

OAuth response type. Set to code for the authorization code flow.

string
required

Registered URI where TBC Bank returns the authorization response. It must match the value registered for your client.

string
required

Fresh, unpredictable value to bind the ID token to this authorization request. Validate the returned ID token's nonce claim when an ID token is issued.

string

Method used to derive the PKCE challenge. Use a method supported by the provider; S256 is recommended.

string

PKCE challenge derived from the code_verifier. Include it when using PKCE.

string

Space-separated preferred languages for the user interface, such as en or ka, if supported.

string
required

Unpredictable value bound to the user's session. Validate the returned value to correlate the response and protect against request forgery.

claims
object
required

JSON object specifying claims to be returned or requirements for claims. Request only claims supported by the provider.

Response

Language
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
*/*