auth

Submit Consent Decision

Changed on

The single mutating consent call. Re-validates the authorize request from the echoed query string; on approve creates an already-approved access request and returns the auth server's authorize URL with the composed scope; on deny returns the app's redirect_uri carrying error=access_denied. The page navigates to redirect_url unconditionally. Approve requires the User role; deny is allowed for any authenticated session.

post/bodhi/v1/apps/access-requests

Request

  • Base URL: http://localhost:1135
  • URL: http://localhost:1135/bodhi/v1/apps/access-requests
  • Auth: OAuth 2 (authorization code, authorization URL /bodhi/v1/auth/initiate, token URL /bodhi/v1/auth/callback)

Request body

querystring required
decision'approve' | 'deny' required
approved_role'scope_user_user' | 'scope_user_power_user'

Example request

{
  "approved": {
    "models_access": {
      "ids": [
        "llama3:8b"
      ],
      "type": "specific"
    },
    "version": "1"
  },
  "approved_role": "scope_user_user",
  "decision": "approve",
  "query": "client_id=app-acme&redirect_uri=https%3A%2F%2Facme.dev%2Fcb&response_type=code&state=abc&code_challenge=xyz&code_challenge_method=S256&scope=scope_user_user"
}

Response

Deny or redirectable request error — no grant created

idstring nullable

Created access request id; omitted on deny and on redirected errors.

redirect_urlstring required

Changes