Skip to content

Complete login/consent for an authorization request

POST
/oauth2/login

Called by the consent UI after user authenticates and consents. Sets the user on the auth request and redirects back to the client with an authorization code.

Login consent completion with the authorization request ID.

object
requestId
required
string format: uuid

Authorization completed, redirect URL returned

object
redirectUri
required
string format: uri

An error occurred

Standardized error response

object
status
required

HTTP status error code

integer
Example
400
message
required

Human-friendly error message

string
Example
Invalid email format
error
required

Error code identifying the specific application error

string
Allowed values: default-role-must-be-in-allowed-roles disabled-endpoint disabled-user email-already-in-use email-already-verified forbidden-anonymous internal-server-error invalid-email-password invalid-request locale-not-allowed password-too-short password-in-hibp-database redirectTo-not-allowed role-not-allowed signup-disabled unverified-user user-not-anonymous invalid-pat invalid-refresh-token invalid-ticket disabled-mfa-totp no-totp-secret invalid-totp mfa-type-not-found totp-already-active invalid-state oauth-token-echange-failed oauth-profile-fetch-failed oauth-provider-error invalid-otp cannot-send-sms provider-account-already-linked