> ## Documentation Index
> Fetch the complete documentation index at: https://docs.open-cluster.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Complete OIDC sign in



## OpenAPI

````yaml /api/openapi.yaml get /api/v1/auth/oidc/callback
openapi: 3.1.0
info:
  title: OpenCluster Control Plane API
  version: 0.1.0
  description: HTTP contract for the OpenCluster product API and inbound webhook endpoints.
  license:
    name: Apache-2.0
servers:
  - url: http://localhost:8080
    description: Local self-hosted deployment
security: []
tags:
  - name: Authentication
  - name: Organizations
  - name: Members
  - name: Sessions
  - name: Policy
  - name: Audit
  - name: Integration Types
  - name: Integrations
  - name: Relays
  - name: Incidents
  - name: Investigations
  - name: Conversations
  - name: Postmortems
  - name: Webhook Deliveries
  - name: Webhook Intake
  - name: Metadata
paths:
  /api/v1/auth/oidc/callback:
    get:
      tags:
        - Authentication
      summary: Complete OIDC sign in
      operationId: completeOIDCSignIn
      parameters:
        - $ref: '#/components/parameters/OAuthCode'
        - $ref: '#/components/parameters/OAuthState'
      responses:
        '302':
          $ref: '#/components/responses/Redirect'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
      security: []
components:
  parameters:
    OAuthCode:
      name: code
      in: query
      required: true
      schema:
        type: string
        minLength: 1
        maxLength: 4096
    OAuthState:
      name: state
      in: query
      required: true
      schema:
        type: string
        minLength: 32
        maxLength: 4096
  responses:
    Redirect:
      description: Browser redirect.
      headers:
        Location:
          required: true
          schema:
            type: string
            format: uri
    BadRequest:
      description: Invalid request.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    Unauthorized:
      description: Missing or rejected credential.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
  schemas:
    Error:
      type: object
      additionalProperties: false
      required:
        - error
      properties:
        error:
          type: string
          minLength: 1
          maxLength: 1024
          example: the selected Organization is not available to this caller
        reason:
          type: string
          enum:
            - credential_rejected
            - session_expired
            - session_revoked
        requires:
          type: string
          minLength: 1
          maxLength: 128

````