Skip to main content

OIDC redirect callback

GET 
/api/v1/auth/providers/:provider/callback

Exchanges the authorization code, verifies the ID token, then redirects to app.web_url with auth (or MFA) cookies set. Creates the user on first login if allowed by the provider's domain restrictions.

Request​

Responses​

Redirect to app.web_url with auth or MFA cookies set

Response Headers
    Set-Cookie

    Either full auth cookies (safebucket_access_token + safebucket_refresh_token) if no MFA step-up is needed, or a single restricted safebucket_mfa_token cookie if mfa_required: true is returned in the body.