OAuth

OAuth redirect target (called by the provider)

Registered as the redirect URI in each provider's developer dashboard, per environment — which is why it keeps this unprefixed path and must not be moved. Not called by clients of ours, and carries no token of ours: the one-time state is what authenticates it.

Exchanges the code, stores the provider credential, creates or revives the connection, then redirects to the redirectUrl from the authorize call with status=success, or status=error&error=<reason> when any step fails. A failure after a consumed state still redirects, so the app always lands back.

get/api/v1/integration/oauth/{providerKey}/callback

Request

  • Base URL
    https://api.sahha.ai (the document declares no server; this is the origin it was published from)
  • Auth
    API key in header Authorization

Path parameters

providerKeystring required
Example:whoop

Provider key as returned by GET /api/v1/integration/user/provider.

Query parameters

statestring required

Opaque one-time value issued by the authorize call.

codestring

Authorisation code. Absent when the user denied consent.

errorstring

Set by the provider when the user denied consent.

Changes

No recorded changes to this operation across all 1 revision of this API.