beehiiv Developer Documentation

Starts the OAuth2 authorization code flow. This endpoint redirects the user to login and consent (if needed), then redirects back to your redirect_uri with a code and state.

Query parameters

client_idstringRequired

The OAuth application client ID (uid).

redirect_uristringRequired

Must exactly match one of the app's configured redirect URIs.

response_typestringRequired

Must be code for the authorization code flow.

scopestringOptional

Space-delimited list of requested scopes.

statestringOptional

Opaque value returned to your callback for CSRF protection.

code_challengestringOptional

PKCE code challenge. Required for public clients.

code_challenge_methodenumOptional

PKCE challenge method (plain or S256). Required for public clients when using PKCE.

Allowed values:

Response

Redirect

Errors

400

O Auth Bad Request Error

401

O Auth Unauthorized Error

$	curl -G https://app.beehiiv.com/oauth/authorize \
>	-H "Content-Type: application/json" \
>	-d client_id=WDgKDt_bHOXUfWRhGf2ovKZmFHQ9r_Erd01IPmz_boc \
>	--data-urlencode redirect_uri=http://localhost:3008/callback \
>	-d response_type=code \
>	--data-urlencode scope=posts:read \
>	-d state=12345678