Finalise OAuth signup

POST

/_torii/auth/signup/continue

const url = 'https://your-app.torii.so/_torii/auth/signup/continue?_is_native=false';
const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: '{"token":"rZmH3pV1l3CkN3...","legalConsentAccepted":true,"codeVerifier":"example"}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url 'https://your-app.torii.so/_torii/auth/signup/continue?_is_native=false' \
  --header 'Content-Type: application/json' \
  --data '{ "token": "rZmH3pV1l3CkN3...", "legalConsentAccepted": true, "codeVerifier": "example" }'

Records the supplied legal-document acceptances, creates the user atomically, and returns a session cookie + short-lived access token.

Parameters

Header Parameters

Host

string

Query Parameters

_is_native

boolean

Request Body^required

application/json

Finalises an OAuth signup that was deferred pending legal consent.

object

token

required

Continuation token returned in the OAuth callback redirect URL.

string

Example

rZmH3pV1l3CkN3...

legalConsentAccepted

required

Whether the user ticked the legal-consent checkbox on the continuation screen. Must be true when the environment’s legal_settings.require_consent is true.

boolean

codeVerifier

PKCE code verifier for native OAuth signups. Required when the continuation was started by a native (Capacitor) OAuth flow (the intent carries an S256 challenge); omitted for web.

string | null

Responses

200