Skip to main content
POST

Headers

x-signature
string

HMAC-SHA256 signature: HMAC-SHA256(secretKey, timestamp + METHOD + path + body). Required for API-key authenticated requests (JWT/OAuth session auth is exempt).

x-timestamp
string

Request timestamp in epoch milliseconds. Required with x-signature for API-key auth. Rejected if drift exceeds 5 minutes.

Body

application/json

OpenAPI schema McpVerifySocialAuthBodyDto.

state
string<uuid>
required

UUID state value returned from the corresponding /auth/social/url call.

Example:

"550e8400-e29b-41d4-a716-446655440000"

code
string

Authorization code forwarded from the OAuth provider callback.

Response

Social authentication succeeded; tokens issued.

success
boolean
required
Example:

true

data
object
required

Endpoint-specific payload