Auth

OIDC callback landing — issues session and redirects to SPA

B1 PR-B (MNE-1449). Validates the HMAC-signed state (double-submitted against the mnemom_oidc_initiator cookie), consumes the single-use nonce, exchanges the authorization code at the Zitadel token endpoint (PKCE), and issues mnemom_session via a 302 to the SPA. Returns 503 unless the cell is configured for Zitadel login.

get/auth/oidc/callback

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/auth/oidc/callback
  • Auth: none required

Query parameters

codestring required
statestring required

Changes

No recorded changes to this operation across all 1 revision of this API.