TExternalLoginEndpoint Class

Entry point of the user-initiated identity-broker flow (the "Login with..." buttons on the Sphinx login page). Given the login transaction the login app is already running and the provider the user picked, it starts the authorization-code challenge against that upstream provider and redirects the browser to it. The upstream result is then handled by the shared external callback endpoint, which maps the identity to a local user and resumes the original downstream request.

Syntax

Unit: Sphinx.Endpoints.ExternalLogin

TExternalLoginEndpoint = class(TObject);

Methods

Name

Description

IssueUpstream​Challenge

Starts an upstream challenge for an already-resolved provider against an existing login transaction: generates PKCE/state/nonce, persists the single-use external auth state bound to Tid, stores the sphinx.external cookie that binds the callback to this browser, and redirects to the upstream authorization endpoint. Shared by this endpoint and the transparent broker redirect so the challenge is built the same way regardless of how the flow was triggered. The external auth state is bounded by...[more]