TokenSmith OAuth 2.0 Provider — v2.1
Initiates the OAuth implicit grant flow. Issues a token and redirects to the provided redirect_uri. The redirect_uri parameter must be included by the client application.
GET /oauth/authorize?client_id=app&redirect_uri=https://app.example.com/cb&response_type=token&state=xyz → 302 https://app.example.com/cb?token=<token>&state=xyz
Default callback handler. Reflects token parameters back to the client for debugging purposes. Not intended for production use.
The following endpoints require a valid admin token via Authorization: Bearer <token> header:
{"host": "..."})