Papr Memory API (1.0.0)

OAuth2 login endpoint. Initiates the OAuth2 authorization code flow.

Query Parameters:

• redirect_uri: The URI to redirect to after authentication (required)
• state: A random string for CSRF protection (optional but recommended)

Flow:

1. Client redirects user to this endpoint with redirect_uri and state
2. This endpoint redirects user to Auth0 for authentication
3. After authentication, Auth0 redirects to /callback with authorization code
4. /callback redirects back to the original redirect_uri with code and state

Example:

GET /login?redirect_uri=https://chat.openai.com&state=abc123

OAuth2 callback endpoint. Processes the authorization code from Auth0.

Query Parameters:

• code: Authorization code from Auth0 (required)
• state: State parameter for CSRF protection (required)

Flow:

1. Auth0 redirects to this endpoint after successful authentication
2. This endpoint validates the authorization code and state
3. Redirects back to the original redirect_uri with code and state
4. Client can then exchange the code for tokens at /token endpoint

Security:

• Validates state parameter to prevent CSRF attacks
• Checks authorization code expiration
• Cleans up session data after processing

OAuth2 token endpoint. Exchanges authorization code for access tokens.

Request Body (JSON or Form):

• grant_type: OAuth2 grant type - "authorization_code" or "refresh_token" (required)
• code: Authorization code from OAuth2 callback (required for authorization_code grant)
• redirect_uri: Redirect URI used in authorization (required for authorization_code grant)
• client_type: Client type - "papr_plugin" or "browser_extension" (optional, default: papr_plugin)
• refresh_token: Refresh token for token refresh (required for refresh_token grant)

Response:

• access_token: OAuth2 access token for API authentication
• token_type: Token type (Bearer)
• expires_in: Token expiration time in seconds
• refresh_token: Refresh token for getting new access tokens
• scope: OAuth2 scopes granted
• user_id: User ID from Auth0

Example Request:

{
    "grant_type": "authorization_code",
    "code": "abc123...",
    "redirect_uri": "https://chat.openai.com",
    "client_type": "papr_plugin"
}

Get current user information. Validates authentication and returns user details.

Authentication Required: One of the following authentication methods must be used:

• Bearer token in Authorization header: Authorization: Bearer <access_token>
• Session token in Authorization header: Authorization: Session <session_token>
• API Key in Authorization header: Authorization: APIKey <api_key>

Headers:

• Authorization: Authentication token (required)
• X-Client-Type: Client type for logging (optional, default: papr_plugin)

Response:

• user_id: Internal user ID
• sessionToken: Session token for API access (if available)
• imageUrl: User profile image URL (if available)
• displayName: User display name (if available)
• email: User email address (if available)
• message: Authentication status message

Example:

GET /me
Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...
X-Client-Type: papr_plugin

OAuth2 logout endpoint. Logs out the user from Auth0 and redirects to specified URL.

Query Parameters:

• returnTo: URL to redirect to after logout (optional, default: extension logout page)
• client_type: Client type for determining Auth0 client ID (optional, default: papr_plugin)

Flow:

1. Client redirects user to this endpoint
2. This endpoint redirects to Auth0 logout URL
3. Auth0 logs out the user and redirects to the specified return URL

Example:

GET /logout?returnTo=https://chat.openai.com

Note: This endpoint initiates the logout process. The actual logout completion happens on Auth0's side.