Skip to content

The consent page's answer.

POST
/oauth/authorize
curl --request POST \
--url https://example.com/api/auth/oauth/authorize \
--header 'Content-Type: application/x-www-form-urlencoded' \
--cookie access_token=<access_token> \
--data request=2489E9AD-2EE2-8E00-8EC9-32D5F69181C0 \
--data decision=allow

Sends the user agent back to the client’s redirect_uri, with state and iss, and with a code, valid once for one minute, or with error=access_denied. When there is no session, the form is malformed or the caller has no such pending request, it goes to {WEB_URL}/oauth/error?reason=… with one of the OAuthErrorReason values instead.

Media typeapplication/x-www-form-urlencoded
object
request
required
string format: uuid
decision
required
string
Allowed values: allow deny

The user agent is sent on; see the operation.

Location
required
string format: uri-reference

The token lacks a scope or isn’t the right kind, or the request came from another origin.

Media typeapplication/problem+json

An RFC 9457 problem.

object
type
required
string
title
required
string
status
required
integer
detail
string
instance
string
request_id
string
errors
object
key
additional properties
string

Example generated

{
"type": "example",
"title": "example",
"status": 1,
"detail": "example",
"instance": "example",
"request_id": "example",
"errors": {
"additionalProperty": "example"
}
}

The body is larger than 64 KiB.

Media typeapplication/problem+json

An RFC 9457 problem.

object
type
required
string
title
required
string
status
required
integer
detail
string
instance
string
request_id
string
errors
object
key
additional properties
string

Example generated

{
"type": "example",
"title": "example",
"status": 1,
"detail": "example",
"instance": "example",
"request_id": "example",
"errors": {
"additionalProperty": "example"
}
}

The service failed; the problem says nothing more.

Media typeapplication/problem+json

An RFC 9457 problem.

object
type
required
string
title
required
string
status
required
integer
detail
string
instance
string
request_id
string
errors
object
key
additional properties
string

Example generated

{
"type": "example",
"title": "example",
"status": 1,
"detail": "example",
"instance": "example",
"request_id": "example",
"errors": {
"additionalProperty": "example"
}
}