Sends the browser to the provider to attach it to this account.

GET

/api/v1/auth/{provider}/link

401 when nothing was signed in, 403 when authenticated with an API token. Everything else is a redirect, since a browser is following this.

Authorization

session

cookietessera_session<token>

Set by POST /auth/login. A browser sends it automatically; it is HttpOnly, so page scripts cannot read or set it.

provider*string

oidc, github or discord

Redirect to the identity provider

curl -X GET 'https://example.com/api/v1/auth/string/link'

Empty

Where the provider sends the browser back. GET

Sends the browser to the identity provider. GET