Exchange OAuth code for session

POST 
/api/auth/oauth/token

Server-side only. Exchange the code from your redirect URL for Locksmith RS256 access + refresh tokens.

Request

Responses

200

OK

400

Invalid body (Zod)

401

invalid_api_key or invalid_token (bad exchange code)

403

user_banned

404

user_not_found