---
title: "Complete the bound GitHub browser authorization"
method: GET
path: "/v1/github/oauth/callback"
---

# Complete the bound GitHub browser authorization

`GET /v1/github/oauth/callback`

## Request

- Base URL: `https://app.ohmyho.st`
- URL: `https://app.ohmyho.st/v1/github/oauth/callback`
- Auth: none required

Browser callback only. Revalidates the original user session or user API key, workspace Owner/Admin authority and authorization expiry, then privately verifies the GitHub account and installation. A valid installation callback without an OAuth code continues automatically through OAuth. Completion records the workspace connection without building or returning provider credentials. Previously issued project authorizations remain supported during rollout.

## Query parameters

- `state` string, required
- `code` string
- `error` string
- `error_description` string
- `iss` 'https://github.com/login/oauth'
- `installation_id` string
- `setup_action` 'install' | 'update' | 'request'

## Other responses

- `303`: Return to the same platform entry without the OAuth code/state in the URL.
- `400`: The request failed.
- `403`: The authorizing GitHub account lacks the required installation access or account authority.
- `429`: The request failed.
- `503`: The request failed.

---

[API](https://skmtc.dev/ohmyho/apis/ohmyho-st-api.md) · [All operations](https://skmtc.dev/ohmyho/apis/ohmyho-st-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ohmyho/apis/ohmyho-st-api/revisions/d069888c0017?raw)