Skip to content

Starts a login: mints `state`/`nonce`/a PKCE verifier, remembers them in

GET
/auth/login
curl --request GET \
--url http://localhost:3001/auth/login \
--header 'Authorization: Bearer <token>'

The flow cookie, and sends the browser to the provider. Cannot fail — there is no user input yet and no network call, only local randomness — so this returns a bare Response, not a Result.

return_to
required
string
nullable

Redirects to the identity provider’s authorization endpoint