GitHub OAuth callback (browser redirect)

Exchanges the code, provisions the user, sets the short-lived HttpOnly handoff cookie (scoped to /auth/handoff), and redirects to the SPA callback page, which completes login via POST /auth/handoff.

get/auth/github/callback

Request

Base URL: /api/v1 (relative, and the document was published on a file host, not at the API’s origin)
URL: /api/v1/auth/github/callback
Auth: none required

Query parameters

codestring

statestring

Response

The standard error envelope (respond.Error / respond.FromError).

errorstring required

HTTP status text.

messagestring

request_idstring

Set on 5xx responses so logs can be correlated.

Changes

No recorded changes to this operation across all 14 revisions of this API.