auth
Cli Start
Build the WorkOS authorization URL for the loopback login flow.
The returned URL redirects (after WorkOS login) to /auth/cli/callback with a signed state carrying the loopback port + PKCE challenge. screen_hint only picks which AuthKit tab opens first (nanocorp signup sends sign-up); the find-or-create callback is identical for both verbs.
get/auth/cli/start
Query parameters
portinteger required
Loopback port the one-time code will be 302'd to
Loopback port the one-time code will be 302'd to
code_challengestring required
PKCE S256 challenge (base64url, no padding)
PKCE S256 challenge (base64url, no padding)
envstring nullable
screen_hintstring nullable
AuthKit tab to default to: 'sign-up' (signup) or 'sign-in' (login). Junk is ignored.
AuthKit tab to default to: 'sign-up' (signup) or 'sign-in' (login). Junk is ignored.
Response
Successful Response