Sign in

v50

latestSwagger 2.0MITraw.githubusercontent.com2026-07-15422691.7 KB
oidc

Exchange an authorization code for a gotify client token.

After the user authenticates with the OIDC provider and the app receives the authorization code via redirect, the app calls this endpoint with the code and PKCE code_verifier. The server exchanges the code with the OIDC provider and returns a gotify client token.

post/auth/oidc/external/token

Request body

codestring required

The authorization code from the OIDC provider.

code_verifierstring required

The PKCE code verifier.

statestring required

The state from the authorize response.

Example request

{
  "code_verifier": "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk",
  "state": "Android Phone:a1b2c3d4e5f6"
}

Response

Ok

tokenstring required

The gotify client token for API authentication.

Example response

{
  "token": "CWH0wZ5r0Mbac.r",
  "user": {
    "admin": true,
    "createdAt": "2019-01-01T00:00:00Z",
    "id": 25,
    "name": "unicorn"
  }
}