connections
Complete a connect flow from the forwarded provider callback.
Internal only — not available publicly or through the API gateway. The path carries no connection id because the callback names none: the connection is resolved from state, which this service minted at initiate and alone can resolve.
Complete a connect flow from the forwarded provider callback. › Request Body
stateThe opaque connect state nonce that resolves the pending connection.
codeThe provider authorization code, on a successful callback.
errorThe provider error code, on an error callback (e.g. access_denied).
issueIdentifierThe issuer identifier from the authorization response, validated against the one recorded at initiate (RFC 9207).
Complete a connect flow from the forwarded provider callback. › Responses
The connected connection and the validated returnUrl to redirect to.
connectionIdThe connection's id.
redirectUrlThe fully-built URL to redirect the browser back to: the consumer's validated returnUrl carrying the new connection.
statusThe lifecycle state of a connection.
List a consumer's connections.
Returns the consumer's connections across every principal, each with its id, connector, principal and status. Not yet implemented — returns 501 until the behaviour lands.
path Parameters
namespaceWhat the connection is based off of.
namespaceIdIdentifier of the namespace instance the connection belongs to.
List a consumer's connections. › Responses
The consumer's connections.
The matching connections.
Begin a connect flow for a connector.
Starts the authorization handshake for a connector, returning the provider authorize URL to redirect the browser to and the id minted for the connection. The connection itself is not written until the flow completes. Not yet implemented — returns 501 until the behaviour lands.
path Parameters
namespaceWhat the connection is based off of.
namespaceIdIdentifier of the namespace instance the connection belongs to.
Begin a connect flow for a connector. › Request Body
connectorIdThe connector to connect, from the catalogue.
returnUrl(?i)https?://\S+ · requiredWhere the browser is returned after connecting; validated against the consumer's returnUrl origin allowlist.
connectionId\S+An existing connection to reconnect in place. Omit to create a new connection.
scopesThe scopes to request; must be a subset of the connector's declared scopes. Omit to request the connector's declared scopes. An empty array means the same as omitting it — there is no way to request no scopes at all.
Begin a connect flow for a connector. › Responses
The authorize URL and the new pending connection id.
authorizeUrlThe fully-built provider authorization URL to redirect the browser to.
connectionIdThe connection id; the sole handle for later token resolution.
Revoke a credential and disconnect a connection.
Revokes the stored credential and disconnects the connection, stopping every caller at once. The connection ends in the revoked status rather than being deleted. Not yet implemented — returns 501 until the behaviour lands.
path Parameters
namespaceWhat the connection is based off of.
namespaceIdIdentifier of the namespace instance the connection belongs to.
connectionIdThe connection to revoke.
Revoke a credential and disconnect a connection. › Responses
Revoked.
Make a bodyless call through a connection to the third party.
Forwards the request to the connector's upstream with the stored credential injected, and returns the third party's response as it arrived. The path after /call/ is the upstream's own path, and any query string on it is forwarded with it. A failure this service generates carries the Sqsp-Connector-Error header. Served for custom OAuth connectors.
path Parameters
namespaceWhat the connection is based off of.
namespaceIdIdentifier of the namespace instance the connection belongs to.
connectionIdThe connection to call through.
upstreamPathThe third party's own path, forwarded as given. Spans every segment after /call/, slashes included.
Make a bodyless call through a connection to the third party. › Responses
The upstream response, passed through. Any status the upstream returns.
Make a call carrying a body through a connection to the third party.
Forwards the request and its body to the connector's upstream with the stored credential injected, and returns the third party's response as it arrived. The body is passed through unread. A failure this service generates carries the Sqsp-Connector-Error header. Served for custom OAuth connectors.
path Parameters
namespaceWhat the connection is based off of.
namespaceIdIdentifier of the namespace instance the connection belongs to.
connectionIdThe connection to call through.
upstreamPathThe third party's own path, forwarded as given. Spans every segment after /call/, slashes included.
Make a call carrying a body through a connection to the third party. › Responses
The upstream response, passed through. Any status the upstream returns.
Make a call carrying a body through a connection to the third party.
Forwards the request and its body to the connector's upstream with the stored credential injected, and returns the third party's response as it arrived. The body is passed through unread. A failure this service generates carries the Sqsp-Connector-Error header. Served for custom OAuth connectors.
path Parameters
namespaceWhat the connection is based off of.
namespaceIdIdentifier of the namespace instance the connection belongs to.
connectionIdThe connection to call through.
upstreamPathThe third party's own path, forwarded as given. Spans every segment after /call/, slashes included.
Make a call carrying a body through a connection to the third party. › Responses
The upstream response, passed through. Any status the upstream returns.
Make a bodyless call through a connection to the third party.
Forwards the request to the connector's upstream with the stored credential injected, and returns the third party's response as it arrived. The path after /call/ is the upstream's own path, and any query string on it is forwarded with it. A failure this service generates carries the Sqsp-Connector-Error header. Served for custom OAuth connectors.
path Parameters
namespaceWhat the connection is based off of.
namespaceIdIdentifier of the namespace instance the connection belongs to.
connectionIdThe connection to call through.
upstreamPathThe third party's own path, forwarded as given. Spans every segment after /call/, slashes included.
Make a bodyless call through a connection to the third party. › Responses
The upstream response, passed through. Any status the upstream returns.
Make a call carrying a body through a connection to the third party.
Forwards the request and its body to the connector's upstream with the stored credential injected, and returns the third party's response as it arrived. The body is passed through unread. A failure this service generates carries the Sqsp-Connector-Error header. Served for custom OAuth connectors.
path Parameters
namespaceWhat the connection is based off of.
namespaceIdIdentifier of the namespace instance the connection belongs to.
connectionIdThe connection to call through.
upstreamPathThe third party's own path, forwarded as given. Spans every segment after /call/, slashes included.
Make a call carrying a body through a connection to the third party. › Responses
The upstream response, passed through. Any status the upstream returns.