Sign in

v51

latestSwagger 2.0AGPL-3.0-or-laterraw.githubusercontent.com2026-08-0116998415.7 KB
auth

Authenticate a user with OpenID Connect

After a redirect from the OpenID Connect provider to the frontend has been made with the authentication code, this endpoint can be used to obtain a jwt token for that user and thus log them in.

post/auth/openid/{provider}/callback

Path parameters

providerinteger required

The OpenID Connect provider key as returned by the /info endpoint

Request body

codestring
redirect_urlstring
scopestring
totp_passcodestring

TOTPPasscode is required when the resolved user has TOTP enabled. Clients must restart the OIDC flow and populate this field after receiving a 412 with error code 1017. See GHSA-8jvc-mcx6-r4cg.

Response

OK

tokenstring

Example response

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
}