Privicore
  1. OAuth Application
Privicore
  • Privicore API
  • Utility
    • Utility
    • Check server health
      GET
    • Request command id status
      GET
  • Profile
    • Profile Model and Authentication Workflow
    • Register new profile
      POST
    • Authenticate
      POST
    • Retrieve profile id
      GET
    • Change password
      POST
    • Generate qr token for authorization
      POST
    • Reauthorize authorization token
      POST
    • Revoke authorization token
      POST
    • Retrieve token expiry
      POST
  • OAuth Application
    • OAuth Application Management
    • Register OAuth Application
      POST
    • Retrieve OAuth app configuration
      POST
    • Request OAuth app authorization code
      GET
    • Retrieve OAuth app authorization code
      POST
    • Obtain OAuth app access token
      POST
    • OAuth application list
      GET
    • Retrieve OAuth application scope
      GET
    • Refresh OAuth app access token
      POST
  • Public key
    • Generate your private and public keys
      GET
    • Register public key
      POST
    • Retrieve public key
      GET
    • Retrieve CAB public key
      GET
  • Data Token
    • Reserve token space
    • Retrieve temporary data token
    • Exchange data for token
    • Upstream file via stream auth
    • Request data via token
    • Download data
    • Configure information security risk meta
    • Configure file meta
    • List data tokens
    • Update data token
    • Delete data
    • Get data token transaction count statistics.
  • Device
    • Request unique identifier (i.e. Register new device)
    • Retrieve unique identifier
    • Retrieve profile devices
    • Configure device meta
    • Approve device
    • Reject device
    • Retrieve device configuration
    • Remove device
  • Storage
    • Register storage device
    • List storage devices
    • Synchronize device
    • Remove storage
  • Verified authenticator
    • Register authenticator
    • List verified authenticators
    • Retrieve voting strategy
    • Set quorum size
    • Set quorum strategy
    • Set voting time limit
    • Set maximum voting attempts
    • Remove authenticator
    • Register voting configuration
    • Update voting configuration
    • List voting configurations
    • Retrieve voting configuration
  • Policy
    • List policy templates
    • Register policy
    • List active policies
    • List inactive policies
    • Activate policy
    • Deactivate policy
    • Delete policy
    • List registered policies
    • Retrieve registered policy
  • Directory
    • Register Directory
    • Retrieve owned Directories
    • Retrieve assigned directories
    • Retrieve Directory
    • Create Directory User
    • Update user information
    • Invite Profile
    • Set profile password
    • List Directory Invites
    • Process Invitation
    • Retrieve directory profile
    • List directory users
    • Directory profiles info
    • Create profile device
    • Add storage device to profile
    • List directory devices
    • Create directory voting pool
    • Store directory meta information
  • Voting
    • Create voting
    • Check pool status
  1. OAuth Application

Request OAuth app authorization code

GET
/profile/oauth-application-request-authorization-code

Overview#

Initiate the OAuth authorization flow by requesting an authorization code for a registered OAuth Application.

Request OAuth Application Authorization Code#

Endpoint: GET /profile/oauth-application-request-authorization-code
Authentication: Required (Authorization token obtained from the step)

Query Parameters#

ParameterTypeRequiredDescription
client_idstringYesThe OAuth Application's client ID
noncestringYesUnique value that must match in the retrieve authorization code request
scope[]array[string]YesFeature scopes defining requested permissions

Use Case#

This is the first step in the OAuth authorization flow. The requesting application provides its client_id and a nonce value for security. The nonce acts as a unique identifier for this authorization request and must be used again when retrieving the authorization code to prevent replay attacks.
The nonce value must be stored and used in the subsequent retrieve authorization code request
The same nonce cannot be reused for multiple authorization requests
Scope functionality is currently reserved for future use

Request

Authorization
API Key
Add parameter in header
X-DPT-AUTHORIZATION
Example:
X-DPT-AUTHORIZATION: ********************
or
Query Params

Header Params

Request Code Samples

Shell
JavaScript
Java
Swift
Go
PHP
Python
HTTP
C
C#
Objective-C
Ruby
OCaml
Dart
R
Request Request Example
Shell
JavaScript
Java
Swift
curl --location -g --request GET 'https://sandbox.privicore.com:9009/profile/oauth-application-request-authorization-code?client_id&nonce&scope[]' \
--header 'X-DPT-AUTHORIZATION: <api-key>'

Responses

🟢202Success
This response does not have a body.
🟠401401
🟠422422
Modified at 2025-12-03 11:10:19
Previous
Retrieve OAuth app configuration
Next
Retrieve OAuth app authorization code
Built with