Initiate authorization

Initiates the OAuth 2.0 authorization flow on merchant.shuttlestaging.com

Flow:

  1. Your application redirects the user to this endpoint with required parameters
  2. This endpoint responds with a 302 redirect to Shuttle's login page
  3. On the login page, the user authenticates and grants permission to your application
  4. After successful authentication and consent, the user is redirected to your redirect_url with an authorization code
  5. Use this code immediately with the /token endpoint to obtain tokens IMPORTANT: The authorization code expires after 15 minutes

Notes:

  • The authorization code is valid for only 15 minutes from the time it's generated
  • The code can only be used once - subsequent attempts with the same code will fail
  • The state parameter is recommended for CSRF protection
  • Your redirect_url must match one of your pre-registered URLs
Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Query Params
string
enum
required

Must be 'code' for authorization code flow

Allowed:
string
required
uri
required
string

Space-delimited list of requested scopes

string

Value used to maintain state between request and callback

Response

Language
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
text/plain