Auth

External-SSO callback landing — issues session and redirects to SPA

MNE-1449 re-flip. Validates the HMAC-signed mnemom_idp_initiator cookie (CSRF), retrieves the idpIntent server-side (POST /v2/idp_intents/{id} with the token, SA-authorized), resolves the LINKED Zitadel user from the retrieve response's top-level userId (fail-closed 403 when the external identity is not linked — never auto-provisions), vouch-mints a first-party session, and issues mnemom_session via a 302 to the SPA. Returns 503 unless the cell is configured for Zitadel login.

get/auth/idp/callback

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/auth/idp/callback
  • Auth: none required

Query parameters

idstring required

The idpIntent id appended by Zitadel to the successUrl.

tokenstring required

The idpIntent token appended by Zitadel to the successUrl.

Changes

No recorded changes to this operation across all 1 revision of this API.