Skip to main content
POST
Sign in with a native provider ID token

Query Parameters

client_type
enum<string>
default:web

Client type determines how refresh tokens are returned:

  • web: Refresh token stored in httpOnly cookie, csrfToken returned in response
  • mobile/desktop/server: refreshToken returned directly in response body
Available options:
web,
mobile,
desktop,
server

Body

application/json
provider
enum<string>
required
Available options:
google
token
string
required

Raw Google ID token

Minimum string length: 1

Response

Sign-in successful

user
object
accessToken
string
csrfToken
string | null

CSRF token for use with refresh endpoint (web clients only)

refreshToken
string | null

Refresh token for mobile/desktop/server clients (null for web clients)