Reusable OAuth API router for Phoenix applications.

This module provides a complete OAuth API that can be mounted in Phoenix applications using the forward macro. It handles all OAuth operations including session creation, authorization URL generation, token exchange, and connection management.

Usage

In your Phoenix router:

defmodule MyAppWeb.Router do
  use MyAppWeb, :router

  scope "/api/oauth" do
    pipe_through :api
    forward "/", Tango.API.Router
  end
end

Configuration

The API expects tenant ID to be provided via:

• Request header: X-Tenant-ID
• Connection assigns: conn.assigns.current_tenant_id

Configure CORS if needed:

config :tango, :api,
  cors_origins: ["http://localhost:3000", "https://myapp.com"]

Routes

• POST /sessions - Create OAuth session
• GET /authorize/:session_token - Get authorization URL
• POST /exchange - Exchange authorization code for a connection (legacy sessions only; sessions created with Tango.create_authorization_session/3 are rejected and never return credentials)
• GET /callback - OAuth callback page for popup flows. Stages the code and posts only the opaque completion handle to the session's exact completion origin
• GET /health - Health check