OAuth 2.1 + PKCE unified auth & federated identity
Unified authorization server issuing access_token / id_token; cross-app SSO, scope management, usage billing. One integration, all products.
Standard REST, unified error codes and pagination.
| Method | Path | Description |
|---|---|---|
| GET | /oauth/authorize | Authorization endpoint (browser redirect, user consent) |
| POST | /oauth/token | Exchange for access_token / id_token / refresh_token |
| GET | /oauth/userinfo | OIDC UserInfo endpoint |
| POST | /oauth/revoke | Revoke token |