> ## Documentation Index
> Fetch the complete documentation index at: https://developers.paperlink.online/llms.txt
> Use this file to discover all available pages before exploring further.

# OAuth 2.1 + PKCE authorize (web session)



## OpenAPI

````yaml https://app.paperlink.online/api/mobile/openapi.json get /api/auth/mobile/authorize
openapi: 3.1.0
info:
  title: PaperLink Mobile API
  version: 1.0.0
  description: >-
    Device-session API for the PaperLink mobile app. Tokens are per-user (no
    team baked in); the acting team is sent per request via X-Team-Id and the
    role is resolved live.
  contact:
    name: PaperLink Support
    url: https://paperlink.online
servers:
  - url: https://app.paperlink.online
    description: Production
security:
  - BearerAuth: []
paths:
  /api/auth/mobile/authorize:
    get:
      tags:
        - Auth
      summary: OAuth 2.1 + PKCE authorize (web session)
      operationId: mobileAuthorize
      parameters:
        - name: response_type
          in: query
          required: true
          schema:
            type: string
            enum:
              - code
        - name: client_id
          in: query
          required: true
          schema:
            type: string
        - name: redirect_uri
          in: query
          required: true
          schema:
            type: string
            format: uri
        - name: code_challenge
          in: query
          required: true
          schema:
            type: string
        - name: code_challenge_method
          in: query
          required: true
          schema:
            type: string
            enum:
              - S256
        - name: state
          in: query
          required: true
          schema:
            type: string
      responses:
        '302':
          description: Redirect to redirect_uri with code + state
        '400':
          $ref: '#/components/responses/BadRequest'
      security: []
components:
  responses:
    BadRequest:
      description: Invalid request
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer

````