Register a social provider
Requires api_keys:write. The OAuth application belongs to the organization: you register it in the provider’s console and paste the credentials here, so the consent screen your customer reads carries your name and not ours.
Pasting them again is how a client secret is rotated. The secret is encrypted at rest and never returned.
Authorizations
A staff session token, uk_st_…. Minted by sign-up, sign-in or the two-factor exchange.
Headers
The organization the caller is acting on — the org_… code that appears in the panel URL. It identifies; the membership JOIN is what authorizes, so a forged code reads nothing. Absent, the session's default organization answers.
Path Parameters
The environment's id.
The social provider. google today; adding one is a row and an implementation, never a migration.
google