bit more progress

internal/api/client/auth/callback.go

@@ -18,4 +18,22 @@
 
 package auth
 
+import (
+	"net/http"
 
+	"github.com/gin-gonic/gin"
+)
+
+// CallbackGETHandler parses a token from an external auth provider.
+func (m *Module) CallbackGETHandler(c *gin.Context) {
+	state := c.Query(callbackStateParam)
+	code := c.Query(callbackCodeParam)
+
+	claims, err := m.idp.HandleCallback(c.Request.Context(), state, code)
+	if err != nil {
+		c.String(http.StatusForbidden, err.Error())
+		return
+	}
+
+	c.JSON(http.StatusOK, claims)
+}