---
title: "Reject OAuth 2.0 Consent Request"
method: PUT
path: "/admin/oauth2/auth/requests/consent/reject"
tags: ["oAuth2"]
---

# Reject OAuth 2.0 Consent Request

`PUT /admin/oauth2/auth/requests/consent/reject`

When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, Ory asks the login provider
to authenticate the subject and then tell Ory now about it. If the subject authenticated, he/she must now be asked if
the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.

The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent
provider uses that challenge to fetch information on the OAuth2 request and then tells Ory if the subject accepted
or rejected the request.

This endpoint tells Ory that the subject has not authorized the OAuth 2.0 client to access resources on his/her behalf.
The consent provider must include a reason why the consent was not granted.

The response contains a redirect URL which the consent provider should redirect the user-agent to.

The default consent provider is available via the Ory Managed Account Experience. To customize the consent provider, please
head over to the OAuth 2.0 documentation.

## Query parameters

- `consent_challenge` string, required

## Request body

- RejectOAuth2Request
  - `error` string — The error should follow the OAuth2 error format (e.g. `invalid_request`, `login_required`). Defaults to `request_denied`.
  - `error_debug` string — Debug contains information to help resolve the problem as a developer. Usually not exposed to the public but only in the server logs.
  - `error_description` string — Description of the error in a human readable format.
  - `error_hint` string — Hint to help resolve the error.
  - `status_code` integer — Represents the HTTP status code of the error (e.g. 401 or 403) Defaults to 400

## Response `200`

oAuth2RedirectTo

- OAuth2RedirectTo — Contains a redirect URL used to complete a login, consent, or logout request.
  - `redirect_to` string, required — RedirectURL is the URL which you should redirect the user's browser to once the authentication process is completed.

## Other responses

- `default` — errorOAuth2

## Changes

- **2022-10-27** `4505403da8d7` — 1 info
  - endpoint added
- **2022-02-16** `82d233540486` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/ory/apis/ory-hydra-api/changes/admin/oauth2/auth/requests/consent/reject/put.md)

---

[API](https://skmtc.dev/ory/apis/ory-hydra-api.md) · [All operations](https://skmtc.dev/ory/apis/ory-hydra-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/ory/ory-hydra-api/revisions/ab053e716585/schema)