diff --git a/www/docs/getting-started/rest-api.md b/www/docs/getting-started/rest-api.md index f1e390e166..97c940e665 100644 --- a/www/docs/getting-started/rest-api.md +++ b/www/docs/getting-started/rest-api.md @@ -17,7 +17,7 @@ The POST submission requires CSRF token from `/api/auth/csrf`. #### GET /api/auth/callback/:provider -Handles retuning requests from OAuth services during sign in. +Handles returning requests from OAuth services during sign in. For OAuth 2.0 providers that support the `state` option, the value of the `state` parameter is checked against the one that was generated when the sign in flow was started - this uses a hash of the CSRF token which MUST match for both the POST and GET calls during sign in. @@ -59,4 +59,4 @@ e.g. `NEXTAUTH_URL=https://example.com/myapp/api/authentication` `/api/auth/signin` -> `/myapp/api/authentication/signin` -::: \ No newline at end of file +:::