Handle Google OAuth callback

Google redirect target. Exchanges the authorization code server-side using the sealed PKCE verifier, parks the token bundle under the provider-bound state ticket, and returns an HTML page that deep-links back to the desktop.

get/oauth/google/callback

Request

Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
URL: /oauth/google/callback
Auth: none declared

Query parameters

statestring required

State ticket.

Example:state_abc123

Opaque user-bound state ticket minted by /v1/google-oauth/start.

codestring

Authorization code.

Example:4/0AfJoh...

Authorization code returned by Google.

errorstring

OAuth error.

Example:access_denied

OAuth error returned by Google when the user cancels or consent fails.

Response

HTML page that redirects to solomon-ai://oauth/google/done.

Changes

No operation changes recorded.