Skip to main content
POST
Complete OIDC Login

Authentication

No authentication required.

Required Permissions

No authentication required.

Body

application/json
code
string
required

Authorization code obtained from the IdP

state
string
required

State forwarded by the IdP

Response

200 - application/json

Success

token
string
required

Authentication token issued to the user.

expiry
number

Token expiration time in epoch milliseconds.

identity
object

Decoded identity for the issued token. Populated for flows whose token is not a Dfns-minted JWT (e.g. OIDC passthrough) so clients can skip JWT decoding; absent on flows where the token's claims carry the same fields.

credentialChallenge
object

Credential challenge offering all supported first-factor credential kinds. Included when the user has no active first-factor credential; absent once one is registered.