Auth

Start social authentication

Starts a login, signup, or invitation flow using authorization code, browser-bound one-time state, PKCE S256, and an OIDC nonce where applicable. Return URLs are restricted to safe local application paths.

post/api/auth/social/{provider}/start

Request

  • Base URL: https://demo.hitkeep.com
  • URL: https://demo.hitkeep.com/api/auth/social/{provider}/start
  • Auth: none declared

Path parameters

provider'google' | 'github' | 'microsoft' required

Request body

flow'login' | 'signup' | 'invite' required
invite_tokenstring
remember_meboolean
return_urlstring

Optional safe local application path.

Response

Provider authorization URL

auth_urlstring uri required

Changes

No recorded changes to this operation across all 1 revision of this API.