Start authorization
Use the secure live start route and continue to Canva with the stored PKCE session.
CANVA GATEWAY
This route is now aligned to the main website callback at /canva/callback so the authorization flow stays clean and brand-consistent on the public domain.
Use the secure live start route and continue to Canva with the stored PKCE session.
Canva sends the code back to the main domain callback so the token can be stored safely on the server.
After consent, the admin and provider routes can confirm the connected Canva account.