---
title: "OIDC callback (foundation mode — disabled by default)"
method: GET
path: "/api/auth/oidc/callback"
tags: ["Authentication"]
---

# OIDC callback (foundation mode — disabled by default)

`GET /api/auth/oidc/callback`

## Request

- Base URL: `https://api.cernion.de`
- URL: `https://api.cernion.de/api/auth/oidc/callback`
- Auth: none declared

⚠️ Builds a session directly from the caller-supplied `claims` payload — no authorization-code exchange, no ID-token signature validation. This is a full authentication bypass if reachable with a real OIDC provider configured, so it is disabled unless `AUTH_FOUNDATION_MODE=true` is explicitly set (local development/demos only). Returns 501 otherwise.

## Query parameters

- `code` string
- `state` string
- `claims` string: Foundation mode claim payload as JSON string.
- `token` string

## Response `200`

Successful response

- object

---

[API](https://skmtc.dev/cernion/apis/cernion-energy-tools-api.md) · [All operations](https://skmtc.dev/cernion/apis/cernion-energy-tools-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cernion/apis/cernion-energy-tools-api/revisions/cdb94473b538?raw)