oauth

GET /v1/auth/oauth/{provider}/callback — handle OAuth provider callback.

Verifies CSRF state, exchanges code for access token, fetches user info, finds or creates the user, links the OAuth provider, and creates a session.

get/v1/auth/oauth/{provider}/callback

Path parameters

providerstring required

OAuth provider

Query parameters

codestring required

Authorization code

statestring required

CSRF state token

Response

Authenticated or TOTP required

OR

Changes