OAuth / SAML callback (POST)

Same as the GET callback but accepts a POST body — required for SAML HTTP-POST binding where the IdP POSTs the SAMLResponse form field to the ACS URL.

POST /auth/{id}/{provider}/callback

OAuth / SAML callback (POST)

cURL

curl --request POST \
  --url http://localhost:3010/auth/{id}/{provider}/callback \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data 'SAMLResponse=<string>' \
  --data 'RelayState=<string>'

400

{
  "Status": "error",
  "Error": "Profile not found"
}

Path Parameters

id · string · required

The unique identifier of the authentication profile.

provider · string · required

The provider sub-path. For Social/OIDC providers this is the Goth provider name (e.g. github, linkedin, openid-connect). For SAML it is saml. For LDAP/Proxy it matches the configured provider identifier.

Body

application/x-www-form-urlencoded

SAMLResponse · string

Base64-encoded SAML assertion (SAML POST binding).

RelayState · string

SAML relay state value.

Response

302

Redirect to ReturnURL after successful authentication.