OAuth 2.0 Echo Endpoint

The echo endpoint is available for Experience Cloud sites at https://MyExperienceCloudSite.my.site.com/services/oauth2/echo, where https://MyExperienceCloudSite.my.site.com is your Experience Cloud domain. This endpoint supports Cross-Origin Resource Sharing (CORS).

During the Authorization Code and Credentials Flow, Salesforce returns a 302 redirect to a preconfigured URL that contains the authorization code, along with other parameters. The /services/oauth2/echo endpoint makes it easy for you to get the code by returning these URL parameters in JSON format. In the next step of the flow, you exchange the code for an access token. Use this endpoint for use cases where you want to complete the entire headless login process, including the token exchange.

To use this endpoint, when you set up your external client app, configure https://MyExperienceCloudSite.my.site.com/services/oauth2/echo as your callback URL, which you use as the redirect_uri value when you set up the flow.

Here’s an example URL that the endpoint accepts as an input.

https://MyExperienceCloudSite.my.site.com/services/oauth2/echo?code=aPrxr*******%3D%3D&state=mystate&sfdc_community_url=https%3A%2F%2FMyExperienceCloudSite.my.site.com%&sfdc_community_id=0DBRXXXXXXXXX

And here’s an example response based on that input.

{"code":"aPrxr*******","sfdc_community_url":"https://MyExperienceCloudSite.my.site.com","sfdc_community_id":"0DBRXXXXXXXXX","state":"mystate"}