OAuth

3 Endpunkte. Basis-URL: https://xapi.ambertech.cloud/api/v1

Begin OAuth flow (302 redirect)#

GET/auth/oauth/authorizeÖffentlich

Parameter

Name Ort Typ Beschreibung

Name	Ort	Typ	Beschreibung
`provider`Pflicht	Query	`string`	Werte: `azuregooglegithubkeycloak`
`redirectTo`Pflicht	Query	`string`	Frontend URL to land on after the callback completes. MUST be in ALLOWED_ORIGINS.
`prompt`	Query	`string`	Silent sign-in: `none` asks the provider to reuse an existing session without showing a login screen. Without one, the callback returns to the login page with no error. Werte: `none`

providerPflicht

Query

string

Werte: azuregooglegithubkeycloak

redirectToPflicht

Query

string

Frontend URL to land on after the callback completes. MUST be in ALLOWED_ORIGINS.

prompt

Query

string

Silent sign-in: `none` asks the provider to reuse an existing session without showing a login screen. Without one, the callback returns to the login page with no error.

Werte: none

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/auth/oauth/authorize"

OAuth callback — exchange code for session#

GET/auth/oauth/callbackÖffentlich

Parameter

Name	Ort	Typ	Beschreibung
`code`Pflicht	Query	`string`	–

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/auth/oauth/callback"

List OAuth providers the login page should render#

GET/auth/oauth/providersÖffentlich

Deployment-aware and pre-auth. SaaS returns the fixed cloud set (Azure only). On-premise returns the subset of providers an admin has enabled in Tenant Config for the pinned org. Keycloak is never returned off-premise.

Antworten

200OK

Beispiel (cURL)

curl -X GET "https://xapi.ambertech.cloud/api/v1/auth/oauth/providers"