OAuth redirect callback (login / signup / link / accept invite)

Public provider redirect target. Validates the sealed state cookie + state query, exchanges the code, and resolves login/self-serve-signup/invitation-accept/link. On success returns a 302 browser navigation (to /dashboard or /settings/account) with Set-Cookie; business failures return JSON error bodies with a variety of statuses.

Parameters

Path Parameters

provider

required

string

Allowed values: google github

Query Parameters

state

string

code

string

error

string

Provider-supplied error (e.g. access_denied)

Responses

302

Success; browser redirect + Set-Cookie

400

State/session expired

Media typeapplication/json

object

error

required

Human-readable error message.

string

message

string

Example^generated

json

{
  "error": "example",
  "message": "example"
}

401

Session changed/lost (link)

Media typeapplication/json

object

error

required

Human-readable error message.

string

message

string

Example^generated

json

{
  "error": "example",
  "message": "example"
}

403

Provider email unverified

Media typeapplication/json

object

error

required

Human-readable error message.

string

message

string

Example^generated

json

{
  "error": "example",
  "message": "example"
}

404

Unsupported provider

Media typeapplication/json

object

error

required

Human-readable error message.

string

message

string

Example^generated

json

{
  "error": "example",
  "message": "example"
}

409

Identity already bound to another user / multiple pending invites / signup race

Media typeapplication/json

object

error

required

Human-readable error message.

string

message

string

Example^generated

json

{
  "error": "example",
  "message": "example"
}

410

Invitation expired

Media typeapplication/json

object

error

required

Human-readable error message.

string

message

string

Example^generated

json

{
  "error": "example",
  "message": "example"
}

500

Session secret not configured / data-integrity fault

Media typeapplication/json

object

error

required

Human-readable error message.

string

message

string

Example^generated

json

{
  "error": "example",
  "message": "example"
}

501

Provider not configured

Media typeapplication/json

object

error

required

Human-readable error message.

string

message

string

Example^generated

json

{
  "error": "example",
  "message": "example"
}

502

Provider code exchange failed

Media typeapplication/json

object

error

required

Human-readable error message.

string

message

string

Example^generated

json

{
  "error": "example",
  "message": "example"
}