Sign in
auth

Handle social login callback

Handle callback from social provider after authentication

post/api/auth/callback/{provider}

Path parameters

providerstring required

Request body

codestring nullable

Authorization code from OAuth provider

statestring nullable

State parameter for CSRF protection

redirect_uristring nullable

Redirect URI used in the authorization request (must match)

access_tokenstring nullable

Access token (if provided directly in fragment)

refresh_tokenstring nullable

Refresh token (if provided directly in fragment)

expires_ininteger nullable

Token expiration time in seconds

refresh_expires_ininteger nullable

Refresh token expiration time in seconds

Example request

{
  "code": "authorization_code_here",
  "state": "random_state_string"
}

Response

Successful Response

access_tokenstring required

JWT access token

refresh_tokenstring required

Refresh token

expires_ininteger required

Access token expiration time in seconds

refresh_expires_ininteger required

Refresh token expiration time in seconds

token_typestring

Token type

user_idstring required

User ID from Keycloak

is_new_userboolean required

Whether this is a newly registered user

requires_profile_completionboolean

True if the authenticated user still has to complete mandatory profile fields before using the app

Example response

{
  "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expires_in": 300,
  "is_new_user": true,
  "refresh_expires_in": 1800,
  "refresh_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "requires_profile_completion": false,
  "token_type": "Bearer",
  "user_id": "123e4567-e89b-12d3-a456-426614174000"
}

Changes

No recorded changes to this endpoint across all 1 revision of this API.