Skip to content

Where a sign-in ends

GET
/auth/zoho/done
curl --request GET \
--url 'https://api.sloose.com/auth/zoho/done?rediscover=1'

Better Auth sends the browser here after its callback, with the session cookie it just set — or with ?error= when the sign-in failed. On success this reads the session, runs discovery for an administrator (the first time, or when /auth/zoho/start was asked to rediscover) with the login access token, and answers with the popup page that hands { type: "sloose:session", token, orgId, userId, role, dc, exp } to the opener. On failure the page carries { type: "sloose:auth-error", message }.

You never call this directly.

ret

The origin the session is posted to; checked again here.

string

The origin the session is posted to; checked again here.

rediscover

Re-read the CRM even if a snapshot exists.

string
Example
1

Re-read the CRM even if a snapshot exists.

error

Set by Better Auth when the sign-in failed.

string

Set by Better Auth when the sign-in failed.

error_description

The reason, when there is one.

string

The reason, when there is one.

A small HTML page that posts the outcome to window.opener and closes itself. Not a JSON API.

Media typetext/html
string

A small HTML page that posts the outcome to window.opener and closes itself. Not a JSON API.

Media typetext/html
string

A small HTML page that posts the outcome to window.opener and closes itself. Not a JSON API.

Media typetext/html
string