---
title: "Deny"
method: POST
path: "/api/oauth/deny"
---

# Deny

`POST /api/oauth/deny`

## Request

- Base URL: `https://api.openshorts.app` (the document declares no server; this is the origin it was published from)
- URL: `https://api.openshorts.app/api/oauth/deny`
- Auth: none declared

The user said no: where to send the browser. Built here, from a
redirect_uri registered for the client, never from the page's own URL
(which anyone can link to with any redirect_uri in it).

## Request body

- DenyRequest
  - `client_id` string, required
  - `redirect_uri` string, required
  - `state` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-27** `70d2de84fa26`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/openshorts/apis/openshorts-api/changes/api/oauth/deny/post.md)

---

[API](https://skmtc.dev/openshorts/apis/openshorts-api.md) - [All operations](https://skmtc.dev/openshorts/apis/openshorts-api/llms.txt) - [OpenAPI document](https://skmtc.dev/openshorts/apis/openshorts-api/revisions/62b7629b5e88?raw)