Initiate authentication

Entry point for an authentication flow. For redirect providers (Social, SAML) this responds with an HTTP redirect to the external IdP. For passthrough providers (LDAP, Proxy) this validates credentials inline.

The {provider} segment must match one of the Goth provider names configured in the profile’s ProviderConfig.UseProviders list (e.g. github, linkedin, openid-connect) or saml, ldap, proxy for the respective provider types.

GET /auth/{id}/{provider}

Initiate authentication

cURL

curl --request GET \
  --url http://localhost:3010/auth/{id}/{provider}

import requests

url = "http://localhost:3010/auth/{id}/{provider}"

response = requests.get(url)

print(response.text)

const options = {method: 'GET'};

fetch('http://localhost:3010/auth/{id}/{provider}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_PORT => "3010",
  CURLOPT_URL => "http://localhost:3010/auth/{id}/{provider}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "http://localhost:3010/auth/{id}/{provider}"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("http://localhost:3010/auth/{id}/{provider}")
  .asString();

require 'uri'
require 'net/http'

url = URI("http://localhost:3010/auth/{id}/{provider}")

http = Net::HTTP.new(url.host, url.port)

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

400

{
  "Status": "error",
  "Error": "Profile not found"
}

Path Parameters

id · string · required

The unique identifier of the authentication profile.

provider · string · required

The provider sub-path. For Social/OIDC providers this is the Goth provider name (e.g. github, linkedin, openid-connect). For SAML it is saml. For LDAP/Proxy it matches the configured provider identifier.

Response

200

Authentication completed inline (passthrough providers). The response body and any redirect depend on the configured ActionType.