---
title: "Callback"
method: GET
path: "/vault/callback"
tags: ["Connections"]
---

# Callback

`GET /vault/callback`

This endpoint gets called after the triggering the authorize flow.

Callback links need a state and code parameter to verify the validity of the request.

When an error occurs during the OAuth flow, providers will optionally include error parameters
in the callback request instead of the code parameter.

When the authorize request was initiated with a `nonce` and CSRF protection is enabled for your
account, the connection is left **unconfirmed** and this endpoint redirects back to your `redirect_uri`
with a hash fragment containing the original `nonce`, a short-lived `confirm_token`, and the
`service_id`: `#nonce=<nonce>&confirm_token=<token>&service_id=<service_id>`. Your application must
verify the `nonce` matches the value it sent and then call
`POST /vault/connections/{unified_api}/{service_id}/confirm` with the `confirm_token` to activate the
connection. Without a `nonce` (or with CSRF protection disabled) the connection becomes callable
immediately and no confirmation step is required.

## Query parameters

- `state` string, required
- `code` string, required
- `error` string
- `error_description` string

## Response `default`

Unexpected error

- UnexpectedErrorResponse
  - `status_code` number — HTTP status code
  - `error` string — Contains an explanation of the status_code as defined in HTTP/1.1 standard (RFC 7231)
  - `type_name` string — The type of error returned
  - `message` string — A human-readable message providing more details about the error.
  - `detail` union — Contains parameter or domain specific information related to the error and why it occurred.
    - string
    - object
  - `ref` string — Link to documentation of error type

## Other responses

- `301` — callback
- `400` — Bad Request
- `401` — Unauthorized
- `402` — Payment Required
- `404` — The specified resource was not found
- `422` — Unprocessable

---

[API](https://skmtc.net/apideck-libraries/apis/vault-api.md) · [All operations](https://skmtc.net/apideck-libraries/apis/vault-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/apideck-libraries/vault-api/versions/1b8e8b6feb36/schema)