oauth

post/oauth/authorize/consent

Request

  • Base URL: https://api.pricklymails.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.pricklymails.com/oauth/authorize/consent
  • Auth: HTTP bearer

Request body

agent_uuidstring required

Public UUID of the caller's own agent to authorize.

approveboolean required

Whether the user approved the request.

client_idstring required

The client's public client_id.

code_challengestring required

PKCE code_challenge (RFC 7636).

code_challenge_methodstring required

PKCE code_challenge_method; only "S256" is supported.

redirect_uristring required

The redirect target, which must exactly match one of the client's registered URIs.

statestring nullable

Opaque anti-CSRF value, echoed back unchanged.

Response

Redirect URL for the frontend to navigate the browser to.

redirect_urlstring required

Where to navigate the browser next: the client's own redirect_uri carrying either code and state (approved) or error=access_denied and state (denied).

Changes

No recorded changes to this operation across all 1 revision of this API.