GET /oauth2/authorize → endpoint removal
app.vssps.visualstudio.com
Deprecated, no date
The provider deprecated Azure DevOps OAuth and scheduled it for removal in 2026 without an exact shutdown date. Calls to the GET /oauth2/authorize endpoint will fail once removed. Existing applications using this authentication flow are affected.
Calls it hits
GET /oauth2/authorize
What to use instead of these calls
Register an app in Microsoft Entra ID and retrieve tokens using the Microsoft Entra token endpoint with the Azure DevOps scope 499b84ac-1321-427f-aa17-267ca6975798/.default. The transition requires a new app registration in a Microsoft Entra tenant and does not support personal Microsoft accounts.
Moving to Microsoft Entra ID OAuth needs a new app registration in a Microsoft Entra tenant; it does not work with personal Microsoft accounts.
In app.vssps.visualstudio.com's words
Azure DevOps OAuth is deprecated and scheduled for removal in 2026. This documentation is for existing Azure DevOps OAuth apps only.
Facts
- API
- app.vssps.visualstudio.com
app.vssps.visualstudio.com - Kind
- Endpoint removal
- Takes effect
- No date given yet
- Calls after that day
- Fail
- Source
- Announcement
- Last updated
- Verified
- , against app.vssps.visualstudio.com's own pages
Questions
When does this change take effect?
app.vssps.visualstudio.com deprecated GET /oauth2/authorize without giving a shutdown date yet.
Do these calls still work?
Yes, they still work: app.vssps.visualstudio.com has not given a shutdown date yet.
How do I find the calls this hits in my code?
Okapi reads your repository, finds the calls this change hits and opens a pull request with the fix. It never commits to your branches: every change comes as a pull request you review.
More from app.vssps.visualstudio.com 1
-
No date
POST /oauth2/tokenEndpoint removal Deprecated, no date
Is your code calling this?
Okapi finds the calls this change hits in your repo and opens the pull request with the fix.