Skip to content

Get continuation state

GET
/_torii/auth/signup/continue
curl --request GET \
--url 'https://your-app.toriiauth.eu/_torii/auth/signup/continue?token=example'

Returns the pending legal documents and provider context for a continuation token. Each call refreshes the intent’s idle TTL.

token
required
string
Host
string

OK

Media typeapplication/json

Current state of a signup/profile continuation: a pre-contract OAuth signup awaiting consent or missing fields, or a deferred sign-in completing an existing account’s profile.

object
email

Email on the continuation: the provider’s claim, or the address the user collected via the email step. Null when neither exists yet.

string | null
oauthProviderLabel

Display label of the OAuth provider (e.g. “Google”, “MitID”). Null for a profile-completion continuation, which carries no provider context.

string | null
existingUser
required

True when the provider identity is already linked to an account. The SDK uses this to avoid sign-up wording during re-consent.

boolean
legalSettings
required

Environment’s legal-consent settings — the SDK uses this to render the checkbox + URLs.

object
requireConsent
required

When true, the SDK signup form shows a checkbox the user must tick.

boolean
termsOfServiceUrl

Public URL to the Terms of Service, or null.

string | null
privacyPolicyUrl

Public URL to the Privacy Policy, or null.

string | null
requiresName
required

True when finalisation needs a name the account does not carry — the SDK renders the name fields.

boolean
requiresEmail
required

True when finalisation needs a code-verified email because the account carries none (a new OAuth sign-up whose provider supplied no verified address, or an existing account that predates the requirement) — the SDK renders the email + verification-code step.

boolean
emailCodeSent
required

True once a verification code has been emailed to the collected address — the SDK renders the code input instead of the email input.

boolean
expiresAt
required

When this continuation expires if no further activity occurs (ISO-8601 UTC).

string format: date-time
Examplegenerated
{
"email": "example",
"oauthProviderLabel": "example",
"existingUser": true,
"legalSettings": {
"requireConsent": true,
"termsOfServiceUrl": "example",
"privacyPolicyUrl": "example"
},
"requiresName": true,
"requiresEmail": true,
"emailCodeSent": true,
"expiresAt": "2026-04-15T12:00:00Z"
}