One time state and browser bound OIDC callback
Request and response reference for GET /api/auth/callback.
/api/auth/callbackRequest
This entry point does not require an existing session. Applicable onboarding, origin and verification policies still apply.
curl -X GET "$OSAI_CONSOLE_BASE_URL/api/auth/callback?state=$STATE&code=$CODE"Parameters
| Name | Location | Requirement | Description |
|---|---|---|---|
state | query · string | Required | Use the value defined for this resource. |
code | query · string | Required | Use the value defined for this resource. |
Request body
This operation does not define a JSON request body.
Responses
Inspect HTTP status before parsing a body. These tables describe client response fields rather than invented successful transaction payloads.
303 · Session created or rotated; secure cookies and allowlisted relative return location
No client body fields are defined for this response.
401 · Expired, consumed, invalid or unverifiable authentication
No client body fields are defined for this response.
403 · Membership or MFA denied
No client body fields are defined for this response.
503 · Identity owner unavailable
No client body fields are defined for this response.
Retries & recovery
Keep the original request identifiers and any required idempotency key. A timeout does not establish failure. Read the original resource or command before another financial write; use expected versions for concurrent changes.