---
title: "Complete the browser consent interaction"
method: POST
path: "/cis2/authorize"
tags: ["Staff Identity"]
---

# Complete the browser consent interaction

`POST /cis2/authorize`

## Request

- Base URL: `https://sim.animahealth.com`
- URL: `https://sim.animahealth.com/cis2/authorize`
- Auth: none required

Requires the matching cis2_interaction browser cookie and hidden fields from the HTML authorization form. Do not fabricate these values. One-use authorization codes expire after two minutes.

## Headers

- `Accept` string

## Request body `application/x-www-form-urlencoded`

- object
  - `interaction` string, required
  - `csrf` string, required
  - `identity` string, required
  - `assignment` string, required
  - `action` 'continue' | 'cancel', required

## Response `200`

Success

- object
  - `redirect` string, required

## Other responses

- `303`: Redirect to registered callback with code/state or an error
- `400`: Invalid input or unsupported workflow
- `401`: Missing or invalid credentials
- `403`: Scope, origin or operator restriction
- `404`: Unknown resource
- `409`: Stale version, invalid transition or unavailable capacity
- `413`: Request exceeds this operation's body-size limit
- `429`: Deployment has reached its 5,000-team capacity
- `500`: Internal simulation error

---

[API](https://skmtc.dev/animahealth/apis/nhs-sim-api.md) - [All operations](https://skmtc.dev/animahealth/apis/nhs-sim-api/llms.txt) - [OpenAPI document](https://skmtc.dev/animahealth/apis/nhs-sim-api/revisions/c7803d7a3e58?raw)