Secure and Brand the Auth Flow in Production

import { Arcade } from '@arcadeai/arcadejs';
 
const client = new Arcade(); // Looks for process.env.ARCADE_API_KEY by default
 
// Within a server GET handler:
// Validate required parameters
if (!flow_id) {
    throw new Error('Missing required parameters: flow_id');
}
 
// Confirm the user's identity
try {
  const result = await client.auth.confirmUser({
    flow_id: flow_id as string,
    user_id: user_id_from_your_app_session, // Replace with the user's ID
  });
} catch (error) {
  console.error('Error during verification', 'status code:', error.status, 'data:', error.data);
  throw error;
}

from arcadepy import AsyncArcade
 
client = AsyncArcade()  # Looks for ARCADE_API_KEY environment variable by default
 
# Within a server GET handler:
# Validate required parameters
if not flow_id:
    raise Exception("Missing required parameters: flow_id")
 
# Confirm the user's identity
try:
    result = await client.auth.confirm_user(
        flow_id=flow_id,
        user_id=user_id_from_your_app_session,  # Replace with the user's ID
    )
except Exception as error:
    print("Error during verification:", error)
    raise Exception("Failed to verify the request")

POST https://cloud.arcade.dev/api/v1/oauth/confirm_user
Authorization: Bearer <arcade_api_key>
Content-Type: application/json

{
  "flow_id": "<flow_id from the query string>",
  "user_id": "<the current user's ID>"
}

// Either redirect to result.next_uri, or render a success page:
const authResponse = await client.auth.waitForCompletion(result.auth_id);
 
if (authResponse.status === "completed") {
  return "Thanks for authorizing!";
} else {
  return "Something went wrong. Please try again.";
}

# Either redirect to result.next_uri, or render a success page:
auth_response = await client.auth.wait_for_completion(result.auth_id)
 
if auth_response.status == "completed":
    return "Thanks for authorizing!"
else:
    return "Something went wrong. Please try again."

HTTP 200 OK
Content-Type: application/json

{
  // Can be used to look up the auth flow's status in the Arcade API
  "auth_id": "ac_2zKml...",

  // Optional: URL to redirect the user to after the authorization flow is complete
  "next_uri": "https://..."
}

console.error('Error during verification', 'status code:', error.status, 'data:', error.data);
throw error;

print("Error during verification:", error)
raise Exception("Failed to verify the request")

HTTP 400 Bad Request
Content-Type: application/json

{
  "code": 400,
  "msg": "An error occurred during verification"
}