Oauth Callback

Finalize an OAuth flow.

Claims the auth request, verifies the caller, exchanges the code, and saves the token. Used by both the frontend bridge and the headless flow (where a customer-owned service forwards the code/state, optionally proxied through smith-go). In all cases the auth request is user-initiated and the caller presents the end user’s own credentials, so the authenticated user must match the user who initiated the flow.

POST /v2/auth/callback/{provider_id}

Oauth Callback

cURL

curl --request POST \
  --url https://api.example.com/v2/auth/callback/{provider_id} \
  --header 'Content-Type: application/json' \
  --data '
{
  "code": "<string>",
  "state": "<string>"
}
'

import requests

url = "https://api.example.com/v2/auth/callback/{provider_id}"

payload = {
    "code": "<string>",
    "state": "<string>"
}
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({code: '<string>', state: '<string>'})
};

fetch('https://api.example.com/v2/auth/callback/{provider_id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/v2/auth/callback/{provider_id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'code' => '<string>',
    'state' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/v2/auth/callback/{provider_id}"

	payload := strings.NewReader("{\n  \"code\": \"<string>\",\n  \"state\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.example.com/v2/auth/callback/{provider_id}")
  .header("Content-Type", "application/json")
  .body("{\n  \"code\": \"<string>\",\n  \"state\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.example.com/v2/auth/callback/{provider_id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n  \"code\": \"<string>\",\n  \"state\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

422

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>",
      "input": "<unknown>",
      "ctx": {}
    }
  ]
}

Path Parameters

provider_id · string · required

Body

application/json

Request model for OAuth callback finalization (frontend bridge and headless).

code · string · required

state · string · required

Response

200

application/json

Successful Response