OpenID & OAuth

Use these endpoints to initiate OAuth/OpenID flows. Login endpoints are browser-oriented and return redirects; callback endpoints receive the provider response.

Integrations must be enabled before you use their OAuth endpoints. See the operator guides for Confluence and SharePoint.

Basic request and response

Start a login flow by calling a provider login endpoint and following the redirect.

Google login
Microsoft login

Confluence login
SharePoint login

curl -i "https://{BASE_URL}/api/v1/app/integration/sharepoint/login"

Example response

HTTP/1.1 302 Found
Location: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=...&redirect_uri=...

Confluence instance
SharePoint instance

curl -i "https://{BASE_URL}/api/v1/app/integration/confluence/{integrationID}/login"

Example response

HTTP/1.1 302 Found
Location: https://auth.atlassian.com/authorize?client_id=...&state=conf_8a7b6c5d4e3f2a1b

curl -i "https://{BASE_URL}/api/v1/app/integration/sharepoint/{integrationID}/login"

Example response

HTTP/1.1 302 Found
Location: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=...&state=sp_1c2d3e4f5a6b7c8d

Refresh an integration token

Confluence refresh
SharePoint refresh

curl -X POST "https://{BASE_URL}/api/v1/app/integration/confluence/{integrationID}/refresh_token" \
  -H "Authorization: Bearer {API_TOKEN}"

Example response

"ok"

curl -X POST "https://{BASE_URL}/api/v1/app/integration/sharepoint/{integrationID}/refresh_token" \
  -H "Authorization: Bearer {API_TOKEN}"

Example response

"ok"

Callback endpoints

Microsoft callback
Confluence callback
SharePoint callback

Endpoint parameters

Type	Name	Required	Notes
Query	`code`	Yes	OAuth authorization code.
Query	`state`	Yes	OAuth state value returned by the provider.

curl -i "https://{BASE_URL}/api/v1/auth/microsoft/callback?code=...&state=..."

Example response

HTTP/1.1 302 Found
Location: https://{BASE_URL}/app/login/success

Endpoint parameters

Type	Name	Required	Notes
Query	`code`	Yes	OAuth authorization code.
Query	`state`	Yes	OAuth state value returned by the provider.

curl -i "https://{BASE_URL}/api/v1/app/integration/confluence/callback?code=...&state=..."

Example response

HTTP/1.1 302 Found
Location: https://{BASE_URL}/app/integrations/confluence

Endpoint parameters

Type	Name	Required	Notes
Query	`code`	Yes	OAuth authorization code.
Query	`state`	Yes	OAuth state value returned by the provider.

curl -i "https://{BASE_URL}/api/v1/app/integration/sharepoint/callback?code=...&state=..."

Example response

HTTP/1.1 302 Found
Location: https://{BASE_URL}/app/integrations/sharepoint

Errors and edge cases

302 redirect: expected for login and callback routes.
401/403: token missing for refresh.
404: integration ID not found.

​Basic request and response

​User SSO login redirects

​Integration OAuth login redirects

​Login with a specific integration instance

​Refresh an integration token

​Callback endpoints

​Errors and edge cases

Basic request and response

User SSO login redirects

Integration OAuth login redirects

Login with a specific integration instance

Refresh an integration token

Callback endpoints

Errors and edge cases