Oauth Approve

Connect the app: one grant, backed by one ordinary API key.

Gated exactly like POST /me/keys, because that is what this is -- minting a key. Looser would mean a member could get one through read-only consent, and that a 30-day credential could be issued on a session cookie alone without the second factor being shown again.

The workspace comes from the session (auth["org"]), never from the body: require("admin") reads the role from the session's current org, so taking the org from anywhere else would check one workspace and write to another.

post/api/v1/auth/oauth/approve

Request

  • Base URL: https://api.mesharc.dev (the document declares no server; this is the origin it was published from)
  • URL: https://api.mesharc.dev/api/v1/auth/oauth/approve
  • Auth: none declared

Headers

authorizationstring nullable
x-mesharc-tenantstring nullable

Request body

client_idstring required
redirect_uristring required
code_challengestring required
code_challenge_methodstring
scopestring
statestring nullable
resourcestring

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.