POST /api/auth/social/:provider/start

All endpoints · Authentication and retries · Download OpenAPI

• Part of a browser authentication or connection flow. Keep the flow's state and cookies; provider values in examples must come from that flow.
• provider is github or x and must be enabled. Start in the browser, retain the flow cookie, then navigate to the returned url. Linking requires a recent signed-in session. returnTo must be an allowed local path.
• Protected writes require an allowed Origin, the CSRF cookie and matching X-CSRF-Token header.

Request

Example

Examples use fictional data. Replace identifiers with resources you can access. For account requests, cookies.txt must contain your own session; set CSRF_TOKEN to the matching CSRF cookie value where required.

{
  "intent": "signin",
  "returnTo": "/"
}

curl --include \
  --request POST \
  'https://api.weavers.app/api/auth/social/github/start' \
  --cookie cookies.txt --cookie-jar cookies.txt \
  --header 'Origin: https://weavers.app' \
  --header "X-CSRF-Token: ${CSRF_TOKEN}" \
  --header 'Content-Type: application/json' \
  --data-binary @request.json

Responses

{
  "url": "example"
}

{}

{}

{}

{
  "error": "example"
}

{
  "error": "example"
}

{}

{
  "error": "example"
}

{
  "error": "example"
}