Skip to main content
GET
/
auth
/
web
/
authorize
TypeScript
import { DiscovrClient } from "discovr";

const discovr = new DiscovrClient("your-client-id", {
  basePath: "https://api.discovr.media",
});

// Builds the authorize request (typically redirects in the browser)
await discovr.publicApi().authorizeClientWeb(
  "your-client-id",
  "opaque-csrf-state",
  window.location.origin + "/callback",
);

Documentation Index

Fetch the complete documentation index at: https://docs.discovr.media/llms.txt

Use this file to discover all available pages before exploring further.

Query Parameters

​
clientID
string
required

The client ID of the third-party application

​
redirectURL
string<uri>

Optional custom redirect URL. If omitted, redirects to the hosted callback page at https://auth.discovr.media/callback.html which handles token exchange via postMessage for web popup flows or deep links for mobile apps. Must be URL encoded when provided.

​
state
string
required

Opaque value to prevent CSRF; echoed back in the callback response

​
platform
enum<string>

Optional platform hint to help determine callback behavior (web popup, mobile deep link, etc.). Not currently used but reserved for future platform-specific optimizations.

Available options:
web,
mobile,
tv

Response

Successful operation (Documentation only). In practice, this endpoint always redirects (302).