Handle OAuth callback
Server:
https://{kibana_url}
- GET /api/actions/connector/_oauth_callback
Handles the OAuth 2.0 authorization code callback from external providers. Exchanges the authorization code for access and refresh tokens.
[Required authorization] Route required privileges: actions:oauth.
Query Parameters
-
codestring The authorization code returned by the OAuth provider.
-
statestring The state parameter for CSRF protection.
-
errorstring Error code if the authorization failed.
-
error_descriptionstring Human-readable error description.
-
session_statestring Session state from the OAuth provider (e.g., Microsoft).
Responses
200
Returns an HTML callback page.
302
Redirects to the return URL with authorization result query parameters.
401
User is not authenticated.