Skip to content
Toriidocs

Get continuation state

GET
/_torii/auth/signup/continue
curl --request GET \
  --url 'https://your-app.toriiauth.eu/_torii/auth/signup/continue?token=example'

Returns the pending legal documents and provider context for a continuation token. Each call refreshes the intent’s idle TTL.

Parameters

Section titled “Parameters”

Query Parameters

Section titled “Query Parameters”
token
required
string

Header Parameters

Section titled “Header Parameters”
Host
string
X-Torii-Flow-Verifier
string

Verifier of the web OAuth flow that delivered the token; required when that flow sent _flow_challenge.

Responses

Section titled “Responses”

200

Section titled “200”

OK

Media typeapplication/json

Current state of a signup/profile continuation: a pre-contract OAuth signup awaiting consent or missing fields, or a deferred sign-in completing an existing account’s profile.

object
email

Email on the continuation: the provider’s claim, or the address the user collected via the email step. Null when neither exists yet.

string | null
oauthProviderLabel

Display label of the OAuth provider (e.g. “Google”, “MitID”). Null for a profile-completion continuation, which carries no provider context.

string | null
existingUser
required

True when the provider identity is already linked to an account. The SDK uses this to avoid sign-up wording during re-consent.

boolean
legalSettings
required

Environment’s legal-consent settings — the SDK uses this to render the checkbox + URLs.

object
requireConsent
required

When true, the SDK signup form shows a checkbox the user must tick.

boolean
termsOfServiceUrl

Public URL to the Terms of Service, or null.

string | null
privacyPolicyUrl

Public URL to the Privacy Policy, or null.

string | null
requiresName
required

True when finalisation needs a name the account does not carry — the SDK renders the name fields.

boolean
requiresEmail
required

True when finalisation needs a code-verified email because the account carries none (a new OAuth sign-up whose provider supplied no verified address, or an existing account that predates the requirement) — the SDK renders the email + verification-code step.

boolean
emailCodeSent
required

True once a verification code has been emailed to the collected address — the SDK renders the code input instead of the email input.

boolean
expiresAt
required

When this continuation expires if no further activity occurs (ISO-8601 UTC).

string format: date-time
Examplegenerated
{
  "email": "example",
  "oauthProviderLabel": "example",
  "existingUser": true,
  "legalSettings": {
    "requireConsent": true,
    "termsOfServiceUrl": "example",
    "privacyPolicyUrl": "example"
  },
  "requiresName": true,
  "requiresEmail": true,
  "emailCodeSent": true,
  "expiresAt": "2026-04-15T12:00:00Z"
}