---
title: "OAuth callback for identity providers that POST the authorization code as form fields (Apple form_post). Extra form fields such as Apple's first-auth `id_token` and `user` are ignored; web login exchanges code via PKCE and does not treat a form id_token as proof."
method: POST
path: "/v1/external/{identityProviderId}/sso/oauth/callback"
---

# OAuth callback for identity providers that POST the authorization code as form fields (Apple form_post). Extra form fields such as Apple's first-auth \`id_token\` and \`user\` are ignored; web login exchanges code via PKCE and does not treat a form id_token as proof.

`POST /v1/external/{identityProviderId}/sso/oauth/callback`

## Path parameters

- `identityProviderId` integer, required

## Request body

- unknown

## Other responses

- `302` — Redirect

## Changes

- **2026-09-03** `d9b4ae8b3380` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/roblox/apis/roblox-api/changes/v1/external/:identityProviderId/sso/oauth/callback/post.md)

---

[API](https://skmtc.dev/roblox/apis/roblox-api.md) · [All operations](https://skmtc.dev/roblox/apis/roblox-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/roblox/roblox-api/revisions/d9b4ae8b3380/schema)