---
title: "Oauth Callback"
method: GET
path: "/api/connectors/oauth/callback"
tags: ["connectors"]
---

# Oauth Callback

`GET /api/connectors/oauth/callback`

## Request

- Base URL: `https://api.advisorppc.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.advisorppc.com/api/connectors/oauth/callback`
- Auth: HTTP bearer

Google OAuth redirect handler. No auth dependency: identity comes from
the HMAC-signed ``state`` AND the HttpOnly flow cookie this browser was
given at oauth/start. Verifies both, redeems the code with the cookie's
PKCE verifier, enforces the granted scopes cover the requested scopes,
re-checks the member is still an admin, encrypts + stores the tokens
tenant-scoped, and redirects back to the connectors page with a result.

## Query parameters

- `code` string, nullable
- `state` string, nullable
- `error` string, nullable

## Headers

- `X-Tenant-Id` integer, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/advisorppc/apis/advisorppc-api.md) · [All operations](https://skmtc.dev/advisorppc/apis/advisorppc-api/llms.txt) · [OpenAPI document](https://skmtc.dev/advisorppc/apis/advisorppc-api/revisions/3441bd729e0c?raw)