auth

Oauth Exchange

Exchange a short-lived OAuth code for a JWT.

The OAuth provider callback redirects the browser to the frontend with only an opaque code in the URL. The frontend POSTs that code here to obtain the actual JWT — keeping the JWT out of nginx access logs, browser history, and Referer headers.

The code is consumed atomically (GETDEL) and is single-use.

post/api/auth/oauth/exchange

Request

  • Base URL: https://fojin.app (the document declares no server; this is the origin it was published from)
  • URL: https://fojin.app/api/auth/oauth/exchange
  • Auth: none declared

Request body

codestring required

Response

Successful Response

access_tokenstring required
token_typestring

Changes

No recorded changes to this operation across all 1 revision of this API.