Flow
- Auth0 redirects the user to this endpoint with a
code
andstate
parameter - Server validates the state parameter to prevent CSRF attacks
- Server exchanges the code for access and ID tokens
- Server validates the ID token and extracts user information
- Server creates or updates the user record
- Server redirects to the original redirect_uri with authentication token
No authentication is required to access this endpoint.
Parameters
Authorization code provided by Auth0
State token for CSRF protection validation