# 400 Bad Request calling Authorize

**URL:** <https://devforum.okta.com/t/400-bad-request-calling-authorize/14636>\
**Category:** Questions\
**Created:** [June 9, 2021, 2:24pm UTC](https://devforum.okta.com/t/400-bad-request-calling-authorize/14636 "2021-06-09T14:24:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dschddny](https://avatars.discourse-cdn.com/v4/letter/d/90db22/32.png) [@dschddny](https://devforum.okta.com/u/dschddny)\
**Post date:** [June 9, 2021, 2:24pm UTC](https://devforum.okta.com/t/400-bad-request-calling-authorize/14636/1 "2021-06-09T14:24:42Z")

</div>

My first time working with the Okta API so there may be something obvious here. I’m calling the Authorize endpoint with the following:

[https://myoktaurl.com/oauth2/v1/authorize?client\_id=MYCLIENTID&response\_type=code&response\_mode=query&scope=openid&redirect\_uri=https://myredirecturl.com/index.html&state=1234567890&nonce=aaaaa32iolkadfoaf2&code\_challenge=aaaaaFuass58fCMPpIgFuwvXmcosqdBhEx6c2mCBqrc&code\_challenge\_method=S256&sessionToken=aaaa19glPbbbb4dHzcXYGFFXqGZMT2D3q3LXoYNccccQ6tIrxJm4rW](https://myoktaurl.com/oauth2/v1/authorize?client_id=MYCLIENTID&response_type=code&response_mode=query&scope=openid&redirect_uri=https://myredirecturl.com/index.html&state=1234567890&nonce=aaaaa32iolkadfoaf2&code_challenge=aaaaaFuass58fCMPpIgFuwvXmcosqdBhEx6c2mCBqrc&code_challenge_method=S256&sessionToken=aaaa19glPbbbb4dHzcXYGFFXqGZMT2D3q3LXoYNccccQ6tIrxJm4rW)

This is giving me a 400 Bad Request, both in Postman and from my code. See anything wrong with the request?

Thanks!

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [June 9, 2021, 3:06pm UTC](https://devforum.okta.com/t/400-bad-request-calling-authorize/14636/2 "2021-06-09T15:06:56Z")

</div>

I recommend making sure your Client ID that you are passing in is correct (associated with a client created in Okta) and that this client is set to ACTIVE in your Okta tenant. More details in this help [article](https://support.okta.com/help/s/article/400-Bad-Request-when-redirecting-to-the-authorize-endpoint-with-no-error-description?language=en_US).

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [February 10, 2024, 12:29am UTC](https://devforum.okta.com/t/400-bad-request-calling-authorize/14636/3 "2024-02-10T00:29:19Z")

</div>


