---
title: "OAuth consent proxy"
method: POST
path: "/oauth/consent"
tags: ["OAuth"]
---

# OAuth consent proxy

`POST /oauth/consent`

## Request

- Base URL: `https://api.apphandoff.com/api`
- URL: `https://api.apphandoff.com/api/oauth/consent`
- Auth: API key in cookie `sb-access-token`

Claims the authorization and proxies the decision to Supabase OAuth. Requires a first-party portal session JWT in the Authorization header: a delegated OAuth access token is refused with 401, so a client cannot approve its own authorization or widen its own scopes.

## Request body

- object

## Response `200`

Consent result

- object

## Other responses

- `400`: Invalid request
- `401`: Not authenticated

---

[API](https://skmtc.dev/apphandoff/apis/apphandoff-api.md) · [All operations](https://skmtc.dev/apphandoff/apis/apphandoff-api/llms.txt) · [OpenAPI document](https://skmtc.dev/apphandoff/apis/apphandoff-api/revisions/9f138fe46d56?raw)