v1
latestOpenAPI 3.0.32026-07-26172157253.6 KBClient
Provider-specific OAuth callback (GET)
OAuth callback endpoint for provider-specific flows (most providers use GET).
Response varies based on the original OAuth initiation:
- With code_challenge (PKCE): Redirects with insforge_code for exchange endpoint
- Without code_challenge (web): Redirects with access_token and sets httpOnly cookie
get/api/auth/oauth/{provider}/callback
Path parameters
provider'google' | 'github' | 'discord' | 'linkedin' | 'facebook' | 'instagram' | 'tiktok' | 'apple' | 'x' | 'spotify' | 'microsoft' required
Query parameters
codestring
Authorization code from OAuth provider
statestring required
JWT state with redirect URI and optional code_challenge
tokenstring
Direct ID token (for some providers)