Return from an OAuth provider
Receive the redirect from Veil’s configured Discord or GitHub application.
/v1/links/callback/{platform}- Access
- OAuth provider callback
- Client
- Local or server client
Parameters#
| Name | Location | Meaning |
|---|---|---|
platformRequired | Path | discord or github, as chosen when the flow started. |
code, state | Query | Parameters supplied by the OAuth provider. Keep them private. |
Request examples#
curl -fsS 'https://veil.rip/v1/links/callback/github'Response#
A callback page that completes the flow in the browser that started it. A callback alone does not publish an account link.
Response headers#
| Header | Value | Meaning |
|---|---|---|
Content-Type | text/html | Use the declared media type before choosing a parser. |
Date | HTTP date | Server time. Compare it with your clock when signing requests. |
Cache-Control | no-store | Do not persist private or temporary responses in a shared cache. |
Retry-After | integer seconds, on rate_limited or busy | Wait at least this long before retrying. Other 429/503 codes do not necessarily include it. |
Errors#
The OAuth callback renders an HTML return page, including when it fails. The codes below describe the failure shown on that page. Response and error guide
| HTTP | Code | Meaning and next step |
|---|---|---|
| 400 | invalid_parameter | A path, query or body field is missing, malformed or outside its accepted range. Correct the field named in |
| 404 | not_found | The requested card, key, alias, code or resource was not found. Check the identifier. Temporary codes and previews may already have expired or been used. |
| 409 | callback_used | This OAuth sign-in already returned once. Resume the original browser flow or start a fresh linking session. |
| 410 | proof_expired | The temporary account-proof session has expired. Start a new linking session. |
| 422 | proof_failed | The provider, code or published proof did not verify. Read |
| 503 | provider_not_configured | The selected proof provider is unavailable on this server. Read /v1/platforms for available methods. |
Shared request errors
| HTTP | Code | Meaning and next step |
|---|---|---|
| 429 | rate_limited | An anonymous, signed-request or API-key allowance was exceeded. Wait at least |
| 500 | internal_error | An unexpected server error occurred. Internal details are not returned. Retry reads with bounded backoff. Check write results before sending a new signed operation. |
| 503 | busy | The application has reached a temporary concurrency or database limit. Wait |