oauth

Authorize Complete

Internal endpoint — called by the web consent page after the user's decision lands. Mints the auth code on approval, returns the redirect URL the web side sends the user to.

Auth: requires a valid Supabase JWT in the Authorization header. The JWT's sub claim becomes the authorized user — body cannot override (confused-deputy guard).

post/oauth/authorize/complete

Request

  • Base URL: https://api.nicheangle.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.nicheangle.com/oauth/authorize/complete
  • Auth: none declared

Request body

client_idstring required
redirect_uristring required
scopestring
statestring
code_challengestring required
code_challenge_methodstring
approvedboolean required

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.