---
title: "Handle Apple OAuth 2.0 callback"
method: GET
path: "/oauth/apple/callback"
tags: ["OAuth Flow"]
---

# Handle Apple OAuth 2.0 callback

`GET /oauth/apple/callback`

Processes the authorization code returned by Apple after user authentication. 
The server exchanges the authorization code with Apple's token endpoint and validates the returned tokens before establishing the user session.

## Query parameters

- `code` string, required
- `state` string, required

## Other responses

- `302` — Redirects the user after successful authentication.
- `400` — Bad request, missing parameters, or state validation failed.
- `500` — Internal server error.

---

[API](https://skmtc.net/zuora/apis/public-api-reference.md) · [All operations](https://skmtc.net/zuora/apis/public-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/zuora/public-api-reference/revisions/0400dd83950b/schema)