/** * OIDC Callback Handler * * Handles the OIDC callback from the provider by: * 1. Validating the state parameter to prevent CSRF attacks * 2. Exchanging the authorization code for tokens (with PKCE validation) * 3. Validating the ID token (signature, claims, nonce) * 4. Fetching user profile from ID token and UserInfo endpoint * 5. Calling the onAuthSuccess callback to create/link user and generate JWT token * 6. Optionally storing the OIDC connection (if storeTokens enabled) * 7. Returning the JWT token to the client (via JSON or redirect) * * Route: GET /oidc/:provider/callback?code=...&state=...&response_type=json */ import { GetHandler, RouteProps } from "@flink-app/flink"; import CallbackRequest from "../schemas/CallbackRequest"; /** * Path parameters for the handler */ interface PathParams { provider: string; [key: string]: string; } /** * Route configuration * This handler is registered programmatically by the plugin */ export declare const Route: RouteProps; /** * OIDC Callback Handler * * Completes the OIDC flow by exchanging the authorization code for tokens, * validating the ID token, building user profile, calling the app's onAuthSuccess * callback to generate JWT token, and returning the token to the client. */ declare const CallbackOidc: GetHandler; export default CallbackOidc; //# sourceMappingURL=CallbackOidc.d.ts.map