# POST /sts/api/authorize

**Resource:** [Authentication](../resources/Authentication.md)
**Authorize**
**Operation ID:** `authorize`

Initiates an OAuth/OpenAuth authorization request and returns the data required to continue the authorization flow. This operation validates the incoming authorization context (e.g., client identity, requested grant/response type, redirect URI, and scope) and, when applicable, issues an authorization code tied to the request. It also supports additional flow parameters such as state for CSRF protection and code_challange / PKCE-related inputs to harden public-client scenarios. On success, the response provides the redirect_uri, code, and state values needed by the client to complete the next step of the flow.

## Request Body

Authorize Request

**Required:** Yes

**Content Types:** `application/json`

**Schema:** [AuthorizeRequest](../schemas/Authorize/AuthorizeRequest.md)

## Responses

| Status | Description |
|--------|-------------|
| 200 | Success |
| 400 | (reference) |
| 404 | (reference) |
| 500 | (reference) |

**Success Response Schema:**

[AuthorizeResponse](../schemas/Authorize/AuthorizeResponse.md)

