GET /api/auth/social/:provider/callback
Authentication flow · HTTP API reference
All endpoints · Authentication and retries · Download OpenAPI
- Part of a browser authentication or connection flow. Keep the flow's state and cookies; provider values in examples must come from that flow.
- Provider-driven callback: use the state and browser-proof cookie created by start. Successful callbacks include code; cancelled flows can include error instead. github iss, when supplied, must equal https://github.com/login/oauth. The result is a 303 browser redirect.
Request
| Parameter | Location | Type and requirement |
|---|---|---|
provider | path | string · required |
state | query | string · required |
code | query | string · optional |
iss | query | string · optional |
error | query | string · optional |
error_description | query | string · optional |
error_uri | query | string · optional |
No request body.
Example
Examples use fictional data. Replace identifiers with resources you can access. For account requests, cookies.txt must contain your own session; set CSRF_TOKEN to the matching CSRF cookie value where required.
curl --include \
--request GET \
'https://api.weavers.app/api/auth/social/github/callback?state=example' \
--cookie cookies.txt --cookie-jar cookies.txtResponses
303 · Continue with GET at the Location header.
Location: Next step in this browser flow.
No JSON response body. Check the status and headers.
400 · Invalid request.
application/json
{}View response model
Error envelopes can include resource-specific details. Check the status before reading these fields.
error optional · stringcode optional · stringmessage optional · stringAdditional fields: JSON values.
401 · Authentication is missing or invalid.
application/json
{}View response model
Error envelopes can include resource-specific details. Check the status before reading these fields.
error optional · stringcode optional · stringmessage optional · stringAdditional fields: JSON values.
403 · Permission, origin or CSRF check failed.
application/json
{}View response model
Error envelopes can include resource-specific details. Check the status before reading these fields.
error optional · stringcode optional · stringmessage optional · stringAdditional fields: JSON values.
429 · Rate limit reached; honor Retry-After when supplied.
application/json
{}View response model
Error envelopes can include resource-specific details. Check the status before reading these fields.
error optional · stringcode optional · stringmessage optional · stringAdditional fields: JSON values.
500 · Server failure.
application/json
{}View response model
Error envelopes can include resource-specific details. Check the status before reading these fields.
error optional · stringcode optional · stringmessage optional · stringAdditional fields: JSON values.