Sign in

v1

latestOpenAPI 3.0.32026-07-26172157253.6 KB
Client

Sign in with ID token (Google One Tap, native SDKs)

Authenticate a user using an ID token obtained from a native SDK (e.g., Google One Tap). Currently only the google provider is supported.

post/api/auth/id-token

Query parameters

client_type'web' | 'mobile' | 'desktop' | 'server'

Client type determines how refresh tokens are returned:

  • web: Refresh token stored in httpOnly cookie, csrfToken returned in response
  • mobile/desktop/server: refreshToken returned directly in response body

Request body

provider'google' required

Identity provider that issued the token

tokenstring required

Raw ID token from the provider SDK

Response

Sign-in successful

accessTokenstring
csrfTokenstring nullable

CSRF token for use with refresh endpoint (web clients only)

refreshTokenstring nullable

Refresh token for mobile/desktop/server clients (null for web clients)