Sign in with Google or Apple
POST
/v1/auth/oauth/{provider}
Post the identity token your app got from Google or Apple sign-in, and the API verifies it, links or creates the matching account, and returns the same kind of JWT the email-and-password flow returns. Signing in with a second provider that shares a verified email with an existing account links to that account instead of creating a duplicate.
Parameters
Path Parameters
provider*
Type
Requiredstring
Request Body
application/json
OAuth sign-in payload (POST /v1/auth/oauth/{provider}, #1891) — the provider-issued OIDC identity token
(Google's ID token / Apple's identity token) obtained by the SPA's interactive sign-in. The backend
validates it against the provider's published keys, then finds-or-creates the matching local account.
The provider-issued OIDC identity token (Google's ID token / Apple's identity token) obtained by the SPA's sign-in flow.
Responses
OK
application/json
Success body for POST /auth/login and POST /auth/oauth/{provider}: a JWT
plus the account it authenticates.
JWT bearer token — send it as Authorization: Bearer <token> on
every authenticated call.
The account the token authenticates.