Popup-aware OAuth callback (Plan 209-02)

GET

/api/v1/connectors/{slug}/oauth/callback

• Production
• Local development

Handles the OAuth provider redirect for both popup and fullpage flows. Performs atomic rollback so a failed token exchange leaves no orphan connector row. Returns popup HTML (for ?ui=popup) or RedirectResponse to /settings/connectors (for ?ui=fullpage).

Authorizations

• ApiKeyAuth

Parameters

Path Parameters

slug

required

string

Query Parameters

code

Any of:

string

string

null

null

state

Any of:

string

string

null

null

ui

string

default: fullpage

Allowed values: popup fullpage

error

Any of:

string

string

null

null

realmId

Any of:

string

string

null

null

shop

Any of:

string

string

null

null

Shopify shop domain

hmac

Any of:

string

string

null

null

Shopify HMAC-SHA256 over callback params

timestamp

Any of:

string

string

null

null

Shopify-supplied Unix timestamp (included in HMAC)

Responses

200

Successful Response

string

422

Validation Error

object

detail

Array<object>

object

ctx

object

input

loc

required

Array

msg

required

string

type

required

string