curl --request GET \
--url https://mylifenote.ai/api/agent/v1/oauth/authorizeimport requests
url = "https://mylifenote.ai/api/agent/v1/oauth/authorize"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://mylifenote.ai/api/agent/v1/oauth/authorize', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://mylifenote.ai/api/agent/v1/oauth/authorize",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://mylifenote.ai/api/agent/v1/oauth/authorize"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://mylifenote.ai/api/agent/v1/oauth/authorize")
.asString();require 'uri'
require 'net/http'
url = URI("https://mylifenote.ai/api/agent/v1/oauth/authorize")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_body<string>{
"error": "invalid_request",
"detail": "PKCE required (code_challenge + S256)"
}Authorize (browser step)
Opens in the user’s browser. Parameters are validated first, then: if the user has no Life Note web session they are redirected (302) to the login page and return here after sign-in; otherwise an HTML consent page is shown. When the user clicks Allow, the browser is redirected (302) to redirect_uri?code=<code>&state=<state>; on Not now, to redirect_uri?error=access_denied&state=<state>. The consent decision itself is a same-origin form POST to this path (fields transaction_id, csrf_token, decision) that is not meant to be called by integrations.
The client_id must belong to a client registered via POST /oauth/register (RFC 7591 dynamic registration, public clients, ids start with agc_) and redirect_uri must exactly match one registered URI (HTTPS, or http on localhost/127.0.0.1). The authorization code is valid for 5 minutes and single use.
curl --request GET \
--url https://mylifenote.ai/api/agent/v1/oauth/authorizeimport requests
url = "https://mylifenote.ai/api/agent/v1/oauth/authorize"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://mylifenote.ai/api/agent/v1/oauth/authorize', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://mylifenote.ai/api/agent/v1/oauth/authorize",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://mylifenote.ai/api/agent/v1/oauth/authorize"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://mylifenote.ai/api/agent/v1/oauth/authorize")
.asString();require 'uri'
require 'net/http'
url = URI("https://mylifenote.ai/api/agent/v1/oauth/authorize")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_body<string>{
"error": "invalid_request",
"detail": "PKCE required (code_challenge + S256)"
}Query Parameters
code Registered client id (starts with agc_, max 120 chars).
Must exactly match a redirect URI registered for the client.
Space-separated list. Supported: journal:read, chat:read. At least one is required; unknown scopes are rejected.
Opaque value echoed back unmodified on the redirect. Strongly recommended for CSRF protection.
PKCE challenge: BASE64URL(SHA256(code_verifier)) without padding.
Only S256 is accepted. Defaults to S256 when omitted.
S256 Response
HTML consent page (user is signed in).
The response is of type string.
Was this page helpful?

