Auth

Approve or deny an app authorization request

Full session, CSRF and allowed Origin required. Consumes the request once. Response is no-store.

post/oauth/requests/{requestId}

Request

  • Base URL: https://api.flashdata.dev/v2
  • URL: https://api.flashdata.dev/v2/oauth/requests/{requestId}
  • Auth: API key in cookie __Host-fd_session and API key in header X-CSRF-Token

Request body

decision'approve' | 'deny' required

Response

Registered client callback with code or denial, state and issuer

redirectUrlstring uri required

Changes

No recorded changes to this operation across all 1 revision of this API.