Quickstart

Use an OAuth authorization code with PKCE, request the REST resource audience, and ask only for the scopes your integration needs.

1. Create a PKCE verifier and challenge.
2. Send the person through the generated authorization operation with resource https://api.barakahtasks.com/.
3. Exchange the single-use code through the generated token operation.
4. Call only operations present in the read-only API reference.
5. Keep credentials out of browser storage, logs, URLs, examples, and support messages.

Exact routes, methods, bodies, headers, errors, and status codes come from the generated OpenAPI contract.