# Do not cURL this URL yourself. Redirect or display it to the user.

import urllib.parse
import secrets

state = secrets.token_urlsafe(32)  # store in session for CSRF verification

params = {
    "client_id": "your-client-id",
    "redirect_uri": "https://your-app.com/callback",
    "response_type": "code",
    "scope": "offline_access organization.read",
    "state": state,
}
auth_url = "https://oauth.qonto.com/oauth2/auth?" + urllib.parse.urlencode(params)

# Do not requests.get(auth_url) yourself. On your backend, respond to the
# user's request with an HTTP 302 redirect to auth_url, e.g. in Flask:
# return redirect(auth_url)

const crypto = require('crypto');

const state = crypto.randomBytes(32).toString('hex'); // store in session

const params = new URLSearchParams({
  client_id: 'your-client-id',
  redirect_uri: 'https://your-app.com/callback',
  response_type: 'code',
  scope: 'offline_access organization.read',
  state,
});
const authUrl = `https://oauth.qonto.com/oauth2/auth?${params.toString()}`;

// Do not fetch(authUrl) yourself. On your backend, respond to the user's
// request with an HTTP 302 redirect to authUrl, e.g. in Express:
// res.redirect(authUrl)

$state = bin2hex(random_bytes(32)); // store in session for CSRF verification

$params = [
    'client_id' => 'your-client-id',
    'redirect_uri' => 'https://your-app.com/callback',
    'response_type' => 'code',
    'scope' => 'offline_access organization.read',
    'state' => $state,
];
$authUrl = 'https://oauth.qonto.com/oauth2/auth?' . http_build_query($params);

// Do not call $authUrl yourself. On your backend, respond to the user's
// request with an HTTP 302 redirect to $authUrl, e.g. in Laravel:
// return redirect($authUrl);

state := generateRandomState() // store in session for CSRF verification

params := url.Values{}
params.Set("client_id", "your-client-id")
params.Set("redirect_uri", "https://your-app.com/callback")
params.Set("response_type", "code")
params.Set("scope", "offline_access organization.read")
params.Set("state", state)

authURL := "https://oauth.qonto.com/oauth2/auth?" + params.Encode()

// Do not http.Get(authURL) yourself. On your backend, respond to the
// user's request with an HTTP 302 redirect, e.g.:
// http.Redirect(w, r, authURL, http.StatusFound)

String state = generateRandomState(); // store in session for CSRF verification

String authUrl = "https://oauth.qonto.com/oauth2/auth"
    + "?client_id=" + URLEncoder.encode("your-client-id", StandardCharsets.UTF_8)
    + "&redirect_uri=" + URLEncoder.encode("https://your-app.com/callback", StandardCharsets.UTF_8)
    + "&response_type=code"
    + "&scope=" + URLEncoder.encode("offline_access organization.read", StandardCharsets.UTF_8)
    + "&state=" + state;

// Do not call authUrl yourself. On your backend, respond to the user's
// request with an HTTP 302 redirect, e.g.:
// response.sendRedirect(authUrl);

require 'securerandom'
require 'uri'

state = SecureRandom.hex(32) # store in session for CSRF verification

params = {
  client_id: 'your-client-id',
  redirect_uri: 'https://your-app.com/callback',
  response_type: 'code',
  scope: 'offline_access organization.read',
  state: state,
}
auth_url = "https://oauth.qonto.com/oauth2/auth?#{URI.encode_www_form(params)}"

# Do not call auth_url yourself. On your backend, respond to the user's
# request with an HTTP 302 redirect, e.g. in Rails:
# redirect_to auth_url

{
  "error": "invalid_grant",
  "error_verbose": "The provided authorization grant (e.g., authorization code, resource owner credentials) or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client",
  "error_description": "The provided authorization grant (e.g., authorization code, resource owner credentials) or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client",
  "status_code": 400
}

{
  "error": "not_found",
  "error_description": "Client not found"
}

{
  "error": "internal_server_error",
  "error_description": "Internal Server Error"
}