跳转到主要内容
POST
POST /admin/api/credential-login/authcode/start

授权

gproxy_session
string
cookie
必填

请求头

x-gproxy-admin-scope
string

Administrative scope selected by the caller.

请求体

application/json

Begin a browser redirect login. The SDK mints the PKCE verifier and the CSRF state itself, so neither is a field here.

providerId
string
必填
label
string | null

The label for the credential this login will create. Absent derives one from the channel and whatever account the upstream names.

owner
object

Who the credential belongs to, in the application layer's own vocabulary. Opaque to this crate: it copies the three columns through untouched, and only the layer above knows what an organization or a team is.

redirectUri
string | null

Where the upstream should send the person back. Absent lets the channel use the redirect it registered with the upstream itself, which is what a CLI-shaped channel needs.

响应

Success

authorizeUrl
string
必填

Where to send the person's browser.

loginSessionId
string
必填

Names the pending session in every later step. It is not a secret, but whoever holds it can complete this login.

redirectUri
string
必填

The redirect the channel actually asked for, which is what the callback will arrive at.