Obtain the necessary secrets to set up the authorization flow
https://example.com/api/sid/callback
.
Because the redirect contains sensitive data, the set of all valid redirect URIs must be pre-registered with SID.
Usually, you will have a redirect URI for each environment that your application runs in (e.g. local development, staging, production).
For example, you may have the following set of redirect URIs:
https://localhost:3000/api/sid/callback
https://staging.example.com/api/sid/callback
https://example.com/api/sid/callback
Enviroment Variable | Value | Is Secret? |
---|---|---|
SID_CLIENT_ID | Client ID | No |
SID_CLIENT_SECRET | Client Secret | Yes |
SID_REDIRECT_URI | The redirect URI corresponding to the current environment | No |
localhost
URI.