oidc

GET /v1/auth/oidc/{org_slug}/callback — handle OIDC provider callback.

Verifies CSRF state, exchanges code for ID token, validates claims, enforces allowed_domains, finds or creates the user, auto-provisions org membership if configured, and creates a session.

get/v1/auth/oidc/{org_slug}/callback

Path parameters

org_slugstring required

Organization slug

Query parameters

codestring required

Authorization code

statestring required

CSRF state token

Response

Authenticated or TOTP required

OR

Changes