Skip to documentation
Weavers Docs

Pages and endpoints

Tab to navigate · Enter to openEsc to close

GET /api/auth/social/:provider/callback

Authentication flow · HTTP API reference

All endpoints · Authentication and retries · Download OpenAPI

  • Part of a browser authentication or connection flow. Keep the flow's state and cookies; provider values in examples must come from that flow.
  • Provider-driven callback: use the state and browser-proof cookie created by start. Successful callbacks include code; cancelled flows can include error instead. github iss, when supplied, must equal https://github.com/login/oauth. The result is a 303 browser redirect.

Request

ParameterLocationType and requirement
providerpathstring · required
statequerystring · required
codequerystring · optional
issquerystring · optional
errorquerystring · optional
error_descriptionquerystring · optional
error_uriquerystring · optional

No request body.

Example

Examples use fictional data. Replace identifiers with resources you can access. For account requests, cookies.txt must contain your own session; set CSRF_TOKEN to the matching CSRF cookie value where required.

cURL (POSIX shell)
curl --include \
  --request GET \
  'https://api.weavers.app/api/auth/social/github/callback?state=example' \
  --cookie cookies.txt --cookie-jar cookies.txt

Responses

303 · Continue with GET at the Location header.
  • Location: Next step in this browser flow.

No JSON response body. Check the status and headers.

400 · Invalid request.

application/json

400 example · synthetic data
{}
View response model

Error envelopes can include resource-specific details. Check the status before reading these fields.

error optional · string
code optional · string
message optional · string

Additional fields: JSON values.

401 · Authentication is missing or invalid.

application/json

401 example · synthetic data
{}
View response model

Error envelopes can include resource-specific details. Check the status before reading these fields.

error optional · string
code optional · string
message optional · string

Additional fields: JSON values.

403 · Permission, origin or CSRF check failed.

application/json

403 example · synthetic data
{}
View response model

Error envelopes can include resource-specific details. Check the status before reading these fields.

error optional · string
code optional · string
message optional · string

Additional fields: JSON values.

429 · Rate limit reached; honor Retry-After when supplied.

application/json

429 example · synthetic data
{}
View response model

Error envelopes can include resource-specific details. Check the status before reading these fields.

error optional · string
code optional · string
message optional · string

Additional fields: JSON values.

500 · Server failure.

application/json

500 example · synthetic data
{}
View response model

Error envelopes can include resource-specific details. Check the status before reading these fields.

error optional · string
code optional · string
message optional · string

Additional fields: JSON values.