social-auth
Social auth callback
Handle the OAuth callback from a social auth provider. Finds or creates the user and initiates MFA.
POST
Body
application/json
Available options:
google, facebook, apple OAuth authorization code returned by the provider.
Server-issued, one-time OAuth state (validated and consumed for Google/Apple).
Shop context for the login; falls back to the verified state or the request domain.
JSON string of user data Apple posts on first authorization.
Apple ID token; decoded to extract the sub claim.