OAuth 2.1 authorization endpoint

Authorization Code + PKCE entry point. Unauthenticated browsers are redirected to /api/oauth/login → /api/oauth/consent → back here on accept. Returns 302 to the client redirect_uri with code + state.

curl -X GET "https://your-instance/api/auth/oauth2/authorize?client_id=string&redirect_uri=http%3A%2F%2Fexample.com&response_type=code&scope=string&code_challenge=string&code_challenge_method=S256"

{
  "error": "string",
  "error_description": "string"
}

{
  "error": "temporarily_unavailable",
  "error_description": "string"
}