Initiate OIDC login flow

POST 
/api/v1/auth/oidc/:provider/login

Generates an authorization URL and returns it to the client. The client should redirect the user to this URL to authenticate.

The body is optional. A native client may supply redirectUri to have the callback hand control back to it (e.g. a custom scheme an ASWebAuthenticationSession can match); the value must be allowlisted in auth.oidc.allowed_redirect_uris. Omitting the body keeps the web flow, which finishes on the built-in completion page.

Request

Responses

200

Authorization URL generated

400

OIDC not enabled, unknown provider, or redirect target not allowlisted

500

Failed to generate authorization URL