--- title: "Changes to Process Authorization Request" method: POST path: "/api/{serviceId}/auth/authorization" --- # Changes to Process Authorization Request `POST /api/{serviceId}/auth/authorization` > Every recorded change to this operation, newest first. ## Timeline Changed in 11 of 19 revisions. - **2026-10-28** `add809c8fb0f`: 81 info - **2026-10-19** `bc25340fc023`: 99 breaking, 12 warning, 27 info - **2026-08-03** `7ad74ab64749`: 3 warning, 13 info - **2026-04-08** `8974f967c0ec`: 1 info - **2026-04-08** `e8d6a1eb26b8`: 1 info - **2026-01-21** `824891deebef`: 1 warning, 1 info - **2026-01-15** `8a534bc68775`: 31 info - **2025-12-18** `504771740022`: 6 info - **2025-12-15** `07644fe9fbd8`: 5 info - **2025-12-15** `5627d7cc0158`: 1 breaking, 2 info - **2025-11-24** `8d73d5938a68`: 2 breaking ## Changes - **2026-10-28** `add809c8fb0f`: 81 info - added the optional property `client/applicationType` to the response with the `200` status - added the optional property `client/attributes` to the response with the `200` status - added the optional property `client/authorizationDetailsTypes` to the response with the `200` status - added the optional property `client/authorizationEncryptionAlg` to the response with the `200` status - added the optional property `client/authorizationEncryptionEnc` to the response with the `200` status - added the optional property `client/authorizationSignAlg` to the response with the `200` status - added the optional property `client/backchannelLogoutUri` to the response with the `200` status - added the optional property `client/bcDeliveryMode` to the response with the `200` status - added the optional property `client/bcNotificationEndpoint` to the response with the `200` status - added the optional property `client/bcRequestSignAlg` to the response with the `200` status - added the optional property `client/clientRegistrationTypes` to the response with the `200` status - added the optional property `client/clientSecret` to the response with the `200` status - added the optional property `client/clientUri` to the response with the `200` status - added the optional property `client/clientUris` to the response with the `200` status - added the optional property `client/contacts` to the response with the `200` status - added the optional property `client/credentialOfferEndpoint` to the response with the `200` status - added the optional property `client/customMetadata` to the response with the `200` status - added the optional property `client/defaultAcrs` to the response with the `200` status - added the optional property `client/derivedSectorIdentifier` to the response with the `200` status - added the optional property `client/developer` to the response with the `200` status - added the optional property `client/digestAlgorithm` to the response with the `200` status - added the optional property `client/extension` to the response with the `200` status - added the optional property `client/fapiModes` to the response with the `200` status - added the optional property `client/grantTypes` to the response with the `200` status - added the optional property `client/haipVersion` to the response with the `200` status - added the optional property `client/idTokenEncryptionAlg` to the response with the `200` status - added the optional property `client/idTokenEncryptionEnc` to the response with the `200` status - added the optional property `client/idTokenSignAlg` to the response with the `200` status - added the optional property `client/jwks` to the response with the `200` status - added the optional property `client/jwksUri` to the response with the `200` status - added the optional property `client/loginUri` to the response with the `200` status - added the optional property `client/organizationName` to the response with the `200` status - added the optional property `client/redirectUris` to the response with the `200` status - added the optional property `client/registrationAccessTokenHash` to the response with the `200` status - added the optional property `client/requestEncryptionAlg` to the response with the `200` status - added the optional property `client/requestEncryptionEnc` to the response with the `200` status - added the optional property `client/requestSignAlg` to the response with the `200` status - added the optional property `client/requestUris` to the response with the `200` status - added the optional property `client/responseModes` to the response with the `200` status - added the optional property `client/responseTypes` to the response with the `200` status - …41 more - **2026-10-19** `bc25340fc023`: 99 breaking, 12 warning, 27 info - the response property `scopes/items/attributes` became nullable for the status `200` - the response property `service/accessTokenSignatureKeyId` became nullable for the status `200` - the response property `service/accessTokenType` became nullable for the status `200` - the response property `service/apiSecret` became nullable for the status `200` - the response property `service/attributes` became nullable for the status `200` - the response property `service/authenticationCallbackApiKey` became nullable for the status `200` - the response property `service/authenticationCallbackApiSecret` became nullable for the status `200` - the response property `service/authenticationCallbackEndpoint` became nullable for the status `200` - the response property `service/authorityHints` became nullable for the status `200` - the response property `service/authorizationEndpoint` became nullable for the status `200` - the response property `service/authorizationSignatureKeyId` became nullable for the status `200` - the response property `service/backchannelAuthenticationEndpoint` became nullable for the status `200` - the response property `service/cimdAllowlist` became nullable for the status `200` - the response property `service/cimdMetadataPolicy` became nullable for the status `200` - the response property `service/clientAttesterRoots` became nullable for the status `200` - the response property `service/credentialIssuerMetadata` became nullable for the status `200` - the response property `service/credentialJwks` became nullable for the status `200` - the response property `service/credentialJwksUri` became nullable for the status `200` - the response property `service/description` became nullable for the status `200` - the response property `service/developerAuthenticationCallbackApiKey` became nullable for the status `200` - the response property `service/developerAuthenticationCallbackApiSecret` became nullable for the status `200` - the response property `service/developerAuthenticationCallbackEndpoint` became nullable for the status `200` - the response property `service/deviceAuthorizationEndpoint` became nullable for the status `200` - the response property `service/deviceVerificationUri` became nullable for the status `200` - the response property `service/deviceVerificationUriComplete` became nullable for the status `200` - the response property `service/endSessionEndpoint` became nullable for the status `200` - the response property `service/fapiModes` became nullable for the status `200` - the response property `service/federationJwks` became nullable for the status `200` - the response property `service/federationRegistrationEndpoint` became nullable for the status `200` - the response property `service/federationSignatureKeyId` became nullable for the status `200` - the response property `service/grantManagementEndpoint` became nullable for the status `200` - the response property `service/hsks` became nullable for the status `200` - the response property `service/idTokenAudType` became nullable for the status `200` - the response property `service/idTokenSignatureKeyId` became nullable for the status `200` - the response property `service/introspectionEndpoint` became nullable for the status `200` - the response property `service/introspectionSignatureKeyId` became nullable for the status `200` - the response property `service/issuer` became nullable for the status `200` - the response property `service/jwks` became nullable for the status `200` - the response property `service/jwksUri` became nullable for the status `200` - the response property `service/keyAttesterRoots` became nullable for the status `200` - …98 more - **2026-08-03** `7ad74ab64749`: 3 warning, 13 info - added the new `SPIFFE_JWT` enum value to the `service/supportedIntrospectionAuthMethods/items/` response property for the response status `200` - added the new `SPIFFE_JWT` enum value to the `service/supportedRevocationAuthMethods/items/` response property for the response status `200` - added the new `SPIFFE_JWT` enum value to the `service/supportedTokenAuthMethods/items/` response property for the response status `200` - added the non-success response with the status `429` - added the optional property `client/backchannelLogoutSessionRequired` to the response with the `200` status - added the optional property `service/backchannelLogoutSessionSupported` to the response with the `200` status - added the optional property `service/backchannelLogoutSupported` to the response with the `200` status - added the optional property `service/clientAttesterRoots` to the response with the `200` status - added the optional property `service/clientAttesterRootsEnabled` to the response with the `200` status - added the optional property `service/clientAttesterRootsOnly` to the response with the `200` status - added the optional property `service/credentialIssuerMetadata/batchSize` to the response with the `200` status - added the optional property `service/credentialIssuerMetadata/credentialResponseEncryptionZipValuesSupported` to the response with the `200` status - added the optional property `service/credentialIssuerMetadata/requireCredentialRequestEncryption` to the response with the `200` status - added the optional property `service/keyAttesterRoots` to the response with the `200` status - added the optional property `service/keyAttesterRootsEnabled` to the response with the `200` status - added the optional property `service/keyAttesterRootsOnly` to the response with the `200` status - **2026-04-08** `8974f967c0ec`: 1 info - added the optional property `service/attestationChallengeTimeWindow` to the response with the `200` status - **2026-04-08** `e8d6a1eb26b8`: 1 info - added the optional property `service/authorizationCodeDuration` to the response with the `200` status - **2026-01-21** `824891deebef`: 1 warning, 1 info - removed the optional property `metadataDocumentLocation` from the response with the `200` status - added the optional property `client/metadataDocumentLocation` to the response with the `200` status - **2026-01-15** `8a534bc68775`: 31 info - added the optional property `client/authTimeRequired` to the response with the `200` status - added the optional property `client/automaticallyRegistered` to the response with the `200` status - added the optional property `client/bcUserCodeRequired` to the response with the `200` status - added the optional property `client/clientSource` to the response with the `200` status - added the optional property `client/createdAt` to the response with the `200` status - added the optional property `client/credentialResponseEncryptionRequired` to the response with the `200` status - added the optional property `client/defaultMaxAge` to the response with the `200` status - added the optional property `client/discoveredByMetadataDocument` to the response with the `200` status - added the optional property `client/dpopRequired` to the response with the `200` status - added the optional property `client/dynamicallyRegistered` to the response with the `200` status - added the optional property `client/entityId` to the response with the `200` status - added the optional property `client/explicitlyRegistered` to the response with the `200` status - added the optional property `client/frontChannelRequestObjectEncryptionRequired` to the response with the `200` status - added the optional property `client/inScopeForTokenMigration` to the response with the `200` status - added the optional property `client/locked` to the response with the `200` status - added the optional property `client/metadataDocumentExpiresAt` to the response with the `200` status - added the optional property `client/metadataDocumentUpdatedAt` to the response with the `200` status - added the optional property `client/modifiedAt` to the response with the `200` status - added the optional property `client/mtlsEndpointAliasesUsed` to the response with the `200` status - added the optional property `client/parRequired` to the response with the `200` status - added the optional property `client/pkceRequired` to the response with the `200` status - added the optional property `client/pkceS256Required` to the response with the `200` status - added the optional property `client/requestObjectEncryptionAlgMatchRequired` to the response with the `200` status - added the optional property `client/requestObjectEncryptionEncMatchRequired` to the response with the `200` status - added the optional property `client/requestObjectRequired` to the response with the `200` status - added the optional property `client/rsRequestSigned` to the response with the `200` status - added the optional property `client/serviceNumber` to the response with the `200` status - added the optional property `client/singleAccessTokenPerSubject` to the response with the `200` status - added the optional property `client/tlsClientCertificateBoundAccessTokens` to the response with the `200` status - added the optional property `client/trustChainExpiresAt` to the response with the `200` status - added the optional property `client/trustChainUpdatedAt` to the response with the `200` status - **2025-12-18** `504771740022`: 6 info - added the new optional request property `cimdOptions` (media type: application/json) - added the new optional request property `cimdOptions` (media type: application/x-www-form-urlencoded) - added the optional property `metadataDocumentLocation` to the response with the `200` status - added the optional property `metadataDocumentUsed` to the response with the `200` status - added the optional property `service/cimdAllowlist` to the response with the `200` status - added the optional property `service/httpAliasProhibited` to the response with the `200` status - **2025-12-15** `07644fe9fbd8`: 5 info - added the optional property `service/cimdAllowlistEnabled` to the response with the `200` status - added the optional property `service/cimdAlwaysRetrieved` to the response with the `200` status - added the optional property `service/cimdHttpPermitted` to the response with the `200` status - added the optional property `service/cimdQueryPermitted` to the response with the `200` status - added the optional property `service/clientIdMetadataDocumentSupported` to the response with the `200` status - **2025-12-15** `5627d7cc0158`: 1 breaking, 2 info - the response property `service/accessTokenSignAlg` became nullable for the status `200` - added the optional property `service/cimdMetadataPolicy` to the response with the `200` status - added the optional property `service/cimdMetadataPolicyEnabled` to the response with the `200` status - **2025-11-24** `8d73d5938a68`: 2 breaking - the `service/credentialIssuerMetadata/credentialEndpoint` response's property type changed from `boolean` to `string`, and format from no format to `uri` for status `200` - the `service/credentialIssuerMetadata/credentialsSupported` response's property type changed from `boolean` to `string` for status `200` --- [Operation](https://skmtc.dev/authlete/apis/authlete-api/docs/api/:serviceId/auth/authorization/post.md) - [API](https://skmtc.dev/authlete/apis/authlete-api.md) - [Page](https://skmtc.dev/authlete/apis/authlete-api/changes/api/:serviceId/auth/authorization/post)