Start or continue native mobile OAuth authorization
Start or continue native mobile OAuth authorization
/api/v1/mobile/oauth/authorizeThis is a system-browser-only Authorization Code + PKCE S256
endpoint for a registered Assign Mobile public client. It never
accepts a client secret. The browser may use its existing Assign
session to complete the request, or it may sign in through the normal
browser ceremony before returning here. The API then redirects only to
the exact registered callback, which is the production universal/app
link https://api.assign.so/mobile/oauth/callback.
The mobile app must not follow this endpoint with an HTTP client, copy browser cookies, or treat the redirect as proof of API access. It receives a short-lived one-time code and exchanges that code at the token endpoint.
Query Parameters
Responses
string <uri>Browser continuation or exact registered callback URI.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.