---
title: "Consent Submit"
method: POST
path: "/oauth/consent"
tags: ["OAuth"]
---

# Consent Submit

`POST /oauth/consent`

Process the consent form submission. Mints the auth code only on approval.

``consent_token`` is the opaque handle emitted by the callback. It never
leaves the state backend as anything more than an ID — the actual consent
parameters (user_id, email, scopes, redirect_uri) live server-side and
can't be tampered with or captured from browser history/proxy logs.

## Response `200`

Successful Response

- unknown

## Other responses

- `400` — Bad Request
- `422` — Unprocessable Entity
- `500` — Internal Server Error
- `503` — Service Unavailable

## Changes

- **2026-08-31** `170ab6ea6e23` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/jentic/apis/jentic-control-plane-api/changes/oauth/consent/post.md)

---

[API](https://skmtc.dev/jentic/apis/jentic-control-plane-api.md) · [All operations](https://skmtc.dev/jentic/apis/jentic-control-plane-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/jentic/jentic-control-plane-api/revisions/f4594f50f4d3/schema)