Changes to OAuth callback for identity providers that POST the authorization code as form fields (Apple form_post). Extra form fields such as Apple's first-auth `id_token` and `user` are ignored; web login exchanges code via PKCE and does not treat a form id_token as proof.

POST /v1/external/{identityProviderId}/sso/oauth/callback

Every recorded change to this endpoint, newest first. Back to the operation

Changed in 1 of the 15 revisions of this API.1

Sep 3, 2026d9b4ae8b33801

What changed

Sep 3, 2026d9b4ae8b33801See the full diff
- ○
  endpoint added
  endpoint-added
This revision also has 3 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog