Auth

GET /login/github

• Redirects to Github

GET /login/github/callback?code={code}&state={state}

• Response:
  • 200 OK

  • {
        "accessToken": "token"
    }
    

  • Http-Only Cookie refresh_token={token}

GET /refreshToken

• Requires Cookie refresh_token={token}
• Response:
  • 200 OK

  • {
        "accessToken": "newToken"
    }
    

  • Http-Only Cookie refresh_token={newToken}

Access to any protected resource

• MUST include Authorization: Bearer {token} header