tags

Wordpress Callback

WordPress sends the browser back here with the credential attached.

Public by necessity — WordPress redirects a browser, it does not call an API — so the signed state and the browser-bound nonce cookie are the whole of the authorisation. The account id in the path is never trusted on its own; it must match the one inside the signature.

get/accounts/{account_id}/wordpress/callback

Request

  • Base URL: https://api.meetadmiral.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.meetadmiral.com/accounts/{account_id}/wordpress/callback
  • Auth: none declared

Path parameters

account_idstring uuid required

Query parameters

statestring
user_loginstring
passwordstring
site_urlstring
successstring

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.