Skip to content

Approve a mobile PKCE authorization request in the first-party browser

GET
/v1/mobile/authorize
curl --request GET \
--url 'https://api.vocapable.com/v1/mobile/authorize?client_id=vocapable-mobile&response_type=code&redirect_uri=example&code_challenge=example&code_challenge_method=S256&installation_id=example&platform=ios&state=example' \
--cookie __Host-vcp-session=<__Host-vcp-session>

Issue a one-use code or show a workspace chooser for the signed-in account.

Browser login navigation belongs to the first-party portal bridge. This code-issuing endpoint stays native-cookie-only: an absent, stale, or forged browser session receives the normal opaque 401 from :class:NativeVerifiedDashboard, never a portal redirect or a weaker bearer-token fallback.

membership_id
Any of:
string
>= 1 characters <= 128 characters
client_id
Client Id
string
default: vocapable-mobile
Allowed value: vocapable-mobile
response_type
Response Type
string
default: code
Allowed value: code
redirect_uri
required
Redirect Uri
string
>= 1 characters <= 2048 characters
code_challenge
required
Code Challenge
string
/^[A-Za-z0-9_-]{43,128}$/
code_challenge_method
Code Challenge Method
string
default: S256
Allowed value: S256
scope
Any of:
string
>= 1 characters <= 256 characters
installation_id
required
Installation Id
string
>= 43 characters <= 256 characters
platform
required
Platform
string
Allowed values: ios android
device_label
Any of:
string
>= 1 characters <= 200 characters
state
required
State
string
>= 16 characters <= 1024 characters

Successful Response

Media typeapplication/json
Examplegenerated
example

Validation Error

Media typeapplication/json
HTTPValidationError
object
detail
Detail
Array<object>
ValidationError
object
loc
required
Location
Array
msg
required
Message
string
type
required
Error Type
string
input
Input
ctx
Context
object
Examplegenerated
{
"detail": [
{
"loc": [
"example"
],
"msg": "example",
"type": "example",
"input": "example",
"ctx": {}
}
]
}