The user said no: where to send the browser. Built here, from a redirect_uri registered for the client, never from the page's own URL (which anyone can link to with any redirect_uri in it).

post/api/oauth/deny

Request

  • Base URL
    https://api.openshorts.app (the document declares no server; this is the origin it was published from)
  • URL
    https://api.openshorts.app/api/oauth/deny
  • Auth
    none declared

Request body

client_idstring required
redirect_uristring required
statestring nullable

Response

Successful Response

unknown required

Changes