OidcCallbackResponse
Response from OIDC callback (successful authentication)
This mirrors the standard LoginResponse format for consistency.
accessTokenstringrequired
JWT access token
Example:
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQexpiresIninteger<int64>required
Token expiry in seconds
Possible values: >= 0
Example:
86400newAccountbooleanrequired
Whether this is a newly created account
Example:
falseproviderstringrequired
OIDC provider used for authentication
Example:
authentiktokenTypestringrequired
Token type (always "Bearer")
Example:
Beareruser objectrequired
User information in login response
emailstringrequired
Email address
Example:
admin@example.comemailVerifiedbooleanrequired
Whether email has been verified
Example:
trueidstring<uuid>required
User unique identifier
Example:
550e8400-e29b-41d4-a716-446655440000permissionsstring[]required
Custom permissions granted to the user (in addition to role permissions)
Example:
["libraries:write","series:delete"]rolestringrequired
User role (reader, maintainer, admin)
Example:
adminusernamestringrequired
Username
Example:
adminOidcCallbackResponse
{
"accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ",
"expiresIn": 86400,
"newAccount": false,
"provider": "authentik",
"tokenType": "Bearer",
"user": {
"email": "admin@example.com",
"emailVerified": true,
"id": "550e8400-e29b-41d4-a716-446655440000",
"permissions": [
"libraries:write",
"series:delete"
],
"role": "admin",
"username": "admin"
}
}