Access
Sso Callback Redirect
Changed onCustom SSO callback endpoint that redirects to SuperTokens.
This endpoint:
- Accepts clean URL path: /auth/sso/callback/{organization_slug}/{provider_slug}
- Validates the organization and provider exist
- Builds SuperTokens thirdPartyId: sso:{organization_slug}:{provider_slug}
- Redirects to SuperTokens callback: /auth/callback/{thirdPartyId}
SuperTokens then handles:
- Exchange code for tokens (using our dynamic provider config)
- Get user info
- Call our sign_in_up override (creates user_identity, adds user_identities to session)
- Redirect to frontend with session cookie
get/auth/sso/callback/{organization_slug}/{provider_slug}
Request
- Base URL/api (relative, and the document was published on a file host, not at the API’s origin)
- URL/api/auth/sso/callback/{organization_slug}/{provider_slug}
- AuthAPI key in header Authorization
Path parameters
organization_slugstring required
provider_slugstring required
Response
Successful Response
unknown required
Changes
- info
endpoint added
- info
- breaking
api path removed without deprecation
- breaking