ログイン
POST /app/api/auth/firebase/exchange /app/v1/auth/firebase/exchange getIdToken HttpOnly session cookie sendPasswordResetEmail password reset link no localStorage token storage
sign up/sign in
TDPxX
Ud2wT
sign up/sign in
POST /app/api/auth/firebase/exchange -> POST /app/v1/auth/firebase/exchange
Firebase getIdToken -> backend exchange
success establishes HttpOnly session cookie / CSRF token / current user context / state/nonce/PKCE server managed / no secret/token in browser localStorage / do not retain credentials on back navigation / pending OAuth credential stays in React memory only / simultaneous login security_warning is surfaced from backend/security-event layer
invalid_credentials / unverified / locked / rate_limited / network_error / email_exists / weak_password / terms_missing / oauth_cancelled / state_mismatch / email_conflict / provider_unavailable / provider_configuration_error / oauth_popup_blocked / provider_account_link_required / provider_credential_unavailable / provider_email_mismatch / provider_link_attempt_stale / security_warning
?sent=1 ?error=locked href="/login?error=locked"
redirect=/
empty state disabled state invalid_credentials unverified locked rate_limited network_error oauth_cancelled state_mismatch email_conflict provider_unavailable security_warning