Verify Google identity and create a one-time auth handoff

Provider-verified emails on new identities must be syntactically valid and permanent; no DNS check. Existing linked identities keep working. New accounts count toward the shared per-client UTC signup ceiling; provider flows are never challenged. Requires the server-issued nonce from /auth/google/start and its browser binding cookie; always verifies the signed token nonce and consumes the issued nonce once. Only that browser can exchange the handoff; verify never issues a binding cookie.

post/auth/google/verify

Request

  • Base URL: https://api.eurobase.dev
  • URL: https://api.eurobase.dev/auth/google/verify
  • Auth: none declared

Request body

credentialstring required
noncestring required
returnTostring

Response

Provider handoff created

okboolean required
provider'google' | 'github' required
handoffTokenstring required
returnTostring required

Changes

No recorded changes to this operation across all 1 revision of this API.