Skip to content

OIDC callback

GET
/auth/callback
curl --request GET \
--url 'https://example.com/auth/callback?code=example&state=example'

Checks state against the value stored at login, exchanges the code, establishes the session, and redirects to the captured return_to (or /). A failure redirects to /login?error=<reason> (expired, refused, session or failed), or for a claims echo to /admin/identity/echo?error=<reason> (/identity/echo for a bootstrap echo), with the error itself in the fragment.

code
required
string

Authorization code from the identity provider

state
required
string

CSRF state value stored at login

Redirect back into the app, or to the page that explains a failure

Media typeapplication/json
string

Example generated

example