Return

This page must be considered part of the iSHARE Framework

This page is considered normative and is therefore compliant with RFC 2119.

Receiving the redirect from the Identity Provider

get

OpenID Connect 1.0 endpoint for receiving the redirect from the Identity Provider or Identity Broker after successful human authentication.

Query parameters

codestringRequired

Authorization code which is going to be used to request for an access token. The authorization code MUST expire shortly after it is issued to mitigate the risk of leaks. A maximum authorization code lifetime of 10 minutes is RECOMMENDED. The client MUST NOT use the authorization code more than once.

statestringRequired

OpenID Connect 1.0 opaque value used to maintain state between the request and the callback. The Service Provider needs to verify if initially sent value towards authorize endpoint is equal to this returned value.

Responses

200

On successful user redirect to the Service Provider, the Service Provider needs to verify state parameter and make use of code parameter in order to retrieve the access token. There are no specific response requirements for this endpoint.

get

HTTPcURLJavaScriptPython

GET /return HTTP/1.1
Host: isharetest.net
Accept: */*

200

On successful user redirect to the Service Provider, the Service Provider needs to verify state parameter and make use of code parameter in order to retrieve the access token. There are no specific response requirements for this endpoint.

No content

Not bound to name return. May have any name the Service Provider chooses.

Example

GET /return?
      code=Dmn-TbSj7OcKl5ym1j5xZsgkabzVP8dMugC81nzmeW4&
      state=ZqVQm4zHaEDyBhzpm1ZRH7fsxy703lq2