Begin an OIDC authorization-code + PKCE browser flow
POST/api/v1/auth/oidc/:provider_id/start
Requires same-origin JSON. The result is an authorization URL and a short-lived host-only HttpOnly SameSite=Lax correlation cookie; no provider tokens are returned to browser JavaScript.
Request
Responses
- 200
- 400
- 403
- 404
- 421
- 429
- 503
Browser authorization URL and correlation cookie
The multipart shape or Idempotency-Key is malformed
The browser mutation did not originate from this application, or the authenticated member lacks the required permission
OIDC is disabled
The Host authority is not allowed by the loopback deployment profile
The trusted connection peer or global OIDC start capacity is busy; retry with backoff
A required core dependency is unavailable; retry with bounded backoff