Start OAuth flow
OAuth callback
Get OAuth tokens
Revoke OAuth access
Gmail webhook
- Validates the Pub/Sub message
- Queues an event in the
event_queuetable - The service picks up the event via the SSE stream at
GET /api/events/stream
Cloud API
Cloud API endpoints for Gmail OAuth and webhook integration.
All endpoints require authentication. See Authentication.
Redirects the user to Google’s OAuth consent screen. After authorization, Google redirects back to the callback URL.
Handles the OAuth redirect from Google, exchanges the authorization code for tokens, and stores them securely.
Returns the stored OAuth token metadata for the team (not the raw tokens). Used by the service in remote mode to fetch emails.
Revokes the Gmail OAuth tokens and removes the stored credentials.
Receives push notifications from Google Cloud Pub/Sub when new emails arrive. This endpoint is called by Google, not by users directly.
The webhook: