The provider's return address

GET

/sso/callback

const url = 'http://127.0.0.1:7700/api/sso/callback';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url http://127.0.0.1:7700/api/sso/callback

Preview. Open without a token. Checks the state, the cookie and the ID token (RS256, issuer, audience, expiry and nonce), maps the person’s groups to a role, adds or updates the person, and sends the browser to /#sso/<one-time code>. No token is ever in an address. A refusal also goes to /#sso/<code>, where redeeming the code gives the reason.

Parameters

Query Parameters

code

string

state

string

Responses

302

To /#sso/<code>. The code works once, for 2 minutes.