v64

latestOpenAPI 3.1.0raw.githubusercontent.com2026-08-016280256.4 KB
oauth

Exchange OAuth code for JWT

Exchange OAuth authorization code for application JWT after validating state, nonce, and ID token signature. User is retrieved from or created in the database and details added to the JWT.

post/api/oauth/exchange

Request body

codestring nullable

Authorization code returned by the OAuth provider after user consent

statestring nullable

State token from the initial auth request, used for CSRF protection

errorstring nullable

Error code if OAuth provider returned an error instead of authorization code

code_verifierstring nullable

PKCE code verifier that corresponds to the code_challenge sent in the authorization request

Response

Successful Response

access_tokenstring required