Google Oauth Callback
Handle Google OAuth callback.
Security (Increment 11): - Validates state exists in Redis (CSRF protection) - Retrieves user_id from Redis (not from query params) - Uses PKCE code_verifier from Redis in token exchange - State is single-use (deleted after verification) - Returns HTML error pages (user-facing redirect flow) - Never logs tokens
Args: request: FastAPI request object (provides access to app state) code: Authorization code from Google state: OAuth state token for CSRF protection error: Error code if Google authorization failed error_description: Human-readable error description session: Database session
Returns: HTML success page or HTML error page
Request
- Base URLhttps://www.priority-guard.com (the document declares no server; this is the origin it was published from)
- Authnone declared
- TypeScriptA function with typed inputs. Its response is checked against the schema.
Query parameters
Authorization code from Google
OAuth state token for CSRF protection
Error code from Google
Error description from Google
Response
Successful Response
Changes
No recorded changes to this operation across all 2 revisions of this API.