OAuth Endpoints

This page documents OAuth endpoints used by Tools web integrations.

Slack OAuth

Start OAuth flow

• Route name: oauth.slack.start
• Path: /oauth/slack/start
• Method: GET or POST
• Auth: auth:web

Starts the Slack OAuth flow and redirects to Slack oauth/v2/authorize.

OAuth callback

• Route name: oauth.slack.callback
• Path: /oauth/slack/callback
• Method: GET
• Auth: auth:web

Slack redirects back here with code and state.

Callback URL helper

• Route name: oauth.slack.callback-url
• Path: /oauth/slack/callback-url
• Method: GET
• Auth: auth:web

Returns the currently computed callback URL in JSON:

{
  "callback_url": "https://tools.tornevall.com/oauth/slack/callback"
}

SoundCloud OAuth

Start OAuth flow

• Route name: oauth.soundcloud.start
• Path: /oauth/soundcloud/start
• Method: POST
• Auth: auth:web

Expected payload:

{
  "provider_app_id": 1,
  "target_owner_type": "system",
  "target_owner_id": null
}

OAuth callback

• Route name: oauth.soundcloud.callback
• Path: /oauth/soundcloud/callback
• Method: GET
• Auth: auth:web

Receives provider callback values (state, code, error, error_description).

Microsoft To Do OAuth

Start OAuth flow

• Route name: oauth.microsoft_todo.start
• Path: /oauth/microsoft-todo/start
• Method: POST
• Auth: auth:web

Starts the Microsoft OAuth flow for the currently logged-in user.

OAuth callback

• Route name: oauth.microsoft_todo.callback
• Path: /oauth/microsoft-todo/callback
• Method: GET
• Auth: auth:web

Receives provider callback values (state, code, error, error_description) and stores the per-user Microsoft To Do connection.

Redirect URL guidance

For Slack app configuration, use:

• Dev: https://tools.tornevall.com/oauth/slack/callback
• Prod: https://tools.tornevall.net/oauth/slack/callback

If SLACK_REDIRECT_URI is configured, that value is used as the effective redirect URI and should be registered in Slack App settings.

For Microsoft To Do / Microsoft Graph app configuration, register the callback matching the current environment:

• Dev: https://tools.tornevall.com/oauth/microsoft-todo/callback
• Prod: https://tools.tornevall.net/oauth/microsoft-todo/callback

If MICROSOFT_TODO_REDIRECT_URI is configured, that value becomes the effective redirect URI and should be registered in the Microsoft Entra app as well.