Auth

IdP callback landing — issues session and redirects to SPA

Validates the HMAC-signed state (from the mnemom_sso_initiator cookie), consumes the single-use nonce, exchanges the PKCE code, enforces domain + org binding, performs SSO identity linking (T3-2c), and issues mnemom_session via a 302 to the SPA's redirect_after path.

get/auth/sso/callback

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/auth/sso/callback
  • Auth: none required

Query parameters

codestring required

Changes

No recorded changes to this operation across all 1 revision of this API.