OAuth 2.0

The following endpoints provide the OAuth 2.0 authorization flow with the "Proof of Key Code exchange" (PKCE) extension for the Make API. The authorization flow uses the Make authorization server instead of the Make zone servers. The access token is then used in requests to the Make API.

1. GET /authorize requests authorization to access resources in Make. The user needs to authorize the client to act on their behalf.

2. POST /token retrieves the access_token, refresh_token or id_token.

Learn more about OAuth 2.0 flow with PKCE.