mcp-oauth
Oauth Callback
Handle the OAuth authorization-server redirect back to thinqOS.
The state parameter is the authentication primitive - no session auth is required here. Flow:
- If error param present → redirect to error page.
- Look up IdentityMcpOAuthState by state → 404 page on miss.
- Check expiry → redirect to error page on expired.
- Exchange the code for tokens.
- Encrypt tokens via FernetEncryptor → INLINE: refs.
- Persist token refs + expiry to the registration.
- Delete the state row.
- Redirect to success page.
get/api/mcp/oauth/callback
Request
- Base URL: https://app.thinqos.com (the document declares no server; this is the origin it was published from)
- URL: https://app.thinqos.com/api/mcp/oauth/callback
- Auth: none declared
Query parameters
codestring nullable
statestring nullable
errorstring nullable
issstring nullable
Response
Successful Response
unknown required
Changes
No recorded changes to this operation across all 1 revision of this API.