neosourceDocs
Search docs

List linked OAuth identities

GET/api/user/identities

listIdentities

Session-authenticated caller only. Lists the OAuth identities linked to the authenticated account.

Requires authentication using a session cookie — see tokens and scopes.

curl

curl -X GET 'https://neosource.dev/api/user/identities' \
  -b 'ns_session=$NEOSOURCE_SESSION'

fetch

fetch("https://neosource.dev/api/user/identities", {
  method: "GET",
  credentials: "include",
});

Responses

200Linked identity list

application/json

IdentityListResponse

object

identitiesrequired

array

items

IdentityResponse

object

identity_idrequired

string

last_used_at

integer | nullint64

linked_atrequired

integerint64

providerrequired

string

provider_email

string | null

provider_loginrequired

string

scopesrequired

array

Provider scopes currently granted on this identity (e.g. `["read:user", "user:email", "repo"]`). Drives the SPA's incremental-authorization gating — e.g. show "Connect private repos" only when `repo` is absent. Empty when no scopes were recorded.

items

string

403Forbidden — one of: forbidden, needs_scope

application/json

one of
  • ErrorForbidden
  • NeedsScopeError

    object

    `403` body returned when listing private repos but the linked identity lacks the required provider scope. The SPA turns this into an incremental-authorization prompt (Tier 2) that calls the `/elevate` OAuth endpoint with this `scope`.

    errorrequired

    string

    Always `needs_scope` — this body exists to carry the extra fields that kind needs.

    "needs_scope"

    scoperequired

    string

    The provider scope to request via elevation (e.g. `"repo"`).

Standard errors

Bodies documented once for the whole API — see standard errors.

  • 400Bad Request — one of: invalid_input
  • 401Authentication required
  • 429Rate limited — retry after the `Retry-After` header
  • 500Internal server error
  • 503Service temporarily unavailable / at capacity — retry after the `Retry-After` header
  • 504Gateway timeout — the request exceeded the server's handling budget