FIREANIME API
Browse API97 operations
POST

ConfirmExternalTrackingOAuthConnection

ConfirmExternalTrackingOAuthConnection proves that the authenticated browser which started the flow also received the provider callback.

/api.v1.tracking.ExternalTrackingService/ConfirmExternalTrackingOAuthConnection Bearer required
01

Request

ConfirmExternalTrackingOAuthConnectionRequest

ConfirmExternalTrackingOAuthConnectionRequestapi.v1.tracking.ConfirmExternalTrackingOAuthConnectionRequest2 fields

Confirm External Tracking OAuth Connection Request message.

attemptId
string

Attempt Id value.

confirmationToken
string

One-time high-entropy proof delivered only to the provider callback window. The backend stores only its SHA-256 digest.

Request JSON
{
  "attemptId": "string",
  "confirmationToken": "your-token"
}
02

Response

ConfirmExternalTrackingOAuthConnectionResponse

ConfirmExternalTrackingOAuthConnectionResponseapi.v1.tracking.ConfirmExternalTrackingOAuthConnectionResponse1 fields

Confirm External Tracking OAuth Connection Response message.

attempt
ExternalTrackingOAuthAttempt

Attempt value.

Example response
{
  "attempt": {
    "attemptId": "string value",
    "provider": "string value",
    "status": "active",
    "message": "success",
    "remoteUsername": "fireanime_user",
    "expiresAt": "string value",
    "completedAt": "string value",
    "errorMessage": "success"
  }
}
03

Referenced models

1 nested message types

ExternalTrackingOAuthAttemptapi.v1.tracking.ExternalTrackingOAuthAttempt8 fields

ExternalTrackingOAuthAttempt describes a user connection flow without exposing the authorization code, PKCE verifier, or provider tokens.

attemptId
string

Opaque identifier returned by BeginExternalTrackingOAuthConnection.

provider
string

Stable provider key: "anilist" or "mal".

status
string

State such as "awaiting_authorization", "queued", "processing", "awaiting_confirmation", "succeeded", "failed", or "expired".

message
string

Safe status detail suitable for display to the current user.

remoteUsername
string

Provider username discovered after a successful connection.

expiresAt
string

RFC3339 expiry timestamp for this short-lived attempt.

completedAtoptional
string

RFC3339 completion timestamp when the attempt reached a terminal state.

errorMessage
string

Sanitized failure detail. Authorization codes, tokens, and raw provider response bodies must never be returned here.

04

Error handling

Common failure codes

unauthenticatedThe Bearer token is missing or invalid.

invalid_argumentThe request payload failed validation.

internalThe service could not complete the operation.