Google's OAuth redirect target
Complete the connection, then send the browser somewhere it can read.
/v1/channels/email/oauth/google/callbackNo credential- Operation id
- google_oauth_callback
- Access
- Public by design. No credential is required or consulted.
/v1/channels/email/oauth/google/callbackComplete the connection, then send the browser somewhere it can read.
Unauthenticated, because Google's redirect carries no session, and safe to be, because the workspace comes from the single-use state row and from nowhere else. A caller with no valid state gets the same answer whether they guessed, replayed, or arrived late, and nothing is written.
A refusal is not an error status. This is a page in a browser: a 4xx here is a blank error screen with no way back, so the outcome is carried to the configured return URL as a query parameter. With no return URL configured the same outcome is the JSON body, which is what makes the flow drivable without a front-end.
Tenancy: public and unauthenticated by design. No credential and no role is required or consulted; the workspace is resolved from the request itself (a body tenant_id, a URL token, or an agent id).
Access: no credential.
Query Parameters
Response Body
application/json
application/json
curl -X GET "https://example.com/v1/channels/email/oauth/google/callback"null