Identity Linking

Link and unlink social login providers (OIDC) to user accounts. Users can connect multiple social providers to a single account for flexible login options.

Get Linked OIDC Identities

Returns list of social login providers linked to the authenticated user's account.

Endpoint: GET /uflow/oidc/identities

Headers

Header	Type	Required	Description
Authorization	string	Yes	Bearer JWT token

Response

Success (200):

[
  {
    "provider_name": "google",
    "email": "[email protected]",
    "display_name": "John Doe",
    "created_at": "2025-01-01T00:00:00Z"
  }
]

Response Fields

Field	Type	Description
provider_name	string	Provider identifier (google, github, microsoft)
email	string	Email from the provider
display_name	string	Display name from the provider
created_at	string	When the identity was linked

Error Responses:

• 401 - Unauthorized

---

Link OIDC Provider

Link a new social login provider to the authenticated user's account.

Endpoint: POST /uflow/oidc/link

Headers

Header	Type	Required	Description
Authorization	string	Yes	Bearer JWT token

Request Body

{
  "provider": "string"
}

Parameters

Parameter	Type	Required	Description
provider	string	Yes	Provider name (e.g., google, github, microsoft)

Response

Success (200):

{
  "redirect_url": "string",
  "state": "string"
}

The response contains a URL to redirect the user to the provider for authentication. After the user authenticates, the identity will be linked.

Error Responses:

• 400 - Bad Request
• 401 - Unauthorized

---

Unlink OIDC Provider

Removes a social login provider from the authenticated user's account.

Endpoint: DELETE /uflow/oidc/unlink/{provider}

Path Parameters

Parameter	Type	Required	Description
provider	string	Yes	Provider name (e.g., google, github, microsoft)

Response

Success (200):

{
  "message": "string"
}

Error Responses:

• 400 - Bad Request
• 401 - Unauthorized