auth

Complete the "Sign in with Google" flow (DVT-39).

Verifies the CSRF state, exchanges the authorization code with Google, and maps the verified-email identity onto an existing invited account that already holds an org membership — a Google sign-in never provisions a new organization (the invitation gate, DVT-32). On success it seals the same dvt_session cookie as the WorkOS flow and redirects to the app. An unmatched identity gets the styled invitation-only 403.

get/auth/google/callback

Request

  • Base URL: http://localhost:8080
  • URL: http://localhost:8080/auth/google/callback
  • Auth: none required

Query parameters

codestring
statestring required
errorstring

Changes

No recorded changes to this operation across all 1 revision of this API.