Skip to main content

Oauth Callback

GET 
/api/v1/auth/oauth/:provider/callback

Handle OAuth callback from provider. Exchanges code for tokens and creates/links user account.

OAuth state is always invalidated on callback (success, error, or exception) to prevent replay attacks. State tokens are one-time use for CSRF protection.

Request​

Responses​

OK