Skip to main content

Handle OIDC Callback

GET 
/sso/:client_slug/oidc/callback

Handle the OIDC provider redirect: verifies the state parameter, exchanges the authorization code with PKCE, validates the ID token, provisions or matches the user, and redirects to the frontend with a one-time token-exchange code. Responds 400 for state errors, 401 for an invalid ID token, and 502 when the token exchange fails.

Request​

Responses​

Successful Response