---
title: "Handle Apple OAuth 2.0 POST callback"
method: POST
path: "/oauth/apple/callback"
tags: ["OAuth Flow"]
---

# Handle Apple OAuth 2.0 POST callback

`POST /oauth/apple/callback`

Processes the form-post response returned by Apple after user authentication. 
The server exchanges the authorization code with Apple's token endpoint and validates the returned tokens before establishing the user session.

## Other responses

- `302` — Redirects the user after successful authentication.
- `400` — Bad request, missing parameters, or invalid token.
- `500` — Internal server error.

---

[API](https://skmtc.net/zuora/apis/public-api-reference.md) · [All operations](https://skmtc.net/zuora/apis/public-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/zuora/public-api-reference/revisions/0400dd83950b/schema)