Sign in
auth

Approve a handoff as the authenticated human, minting the code.

Changed on

Runs INSIDE THE POPUP, on this instance's own origin, under this instance's own ceremonies — password + TOTP, passkey, OIDC, whatever this instance's human-auth configuration says. Authentication to a remote always happens on the remote's own origin; that is a design rule, not a platform limitation.

It takes a HUMAN SESSION and refuses a workspace bearer by construction: a cross-origin credential living in another origin's JavaScript must not be able to authorize the issuance of another one.

post/api/v1/auth/workspace/approve

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/auth/workspace/approve
  • Auth: HTTP bearer

Request body

statestring required

Response

The authorization code and the callback to deliver it to.

codestring required

Single-use, atomically consumed at redemption.

redirect_uristring required

Changes

  • 54b2780eec85Revision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

  • f84a1cd8a05aRevision changes
    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status