---
title: "Decide an OAuth authorization request by choice; a same-choice repeat by the deciding account is a re-delivery"
method: POST
path: "/v1/account/oauth/requests/{id}/decision"
---

# Decide an OAuth authorization request by choice; a same-choice repeat by the deciding account is a re-delivery

`POST /v1/account/oauth/requests/{id}/decision`

## Request

- Base URL: `https://api.roveapi.com`
- URL: `https://api.roveapi.com/v1/account/oauth/requests/{id}/decision`
- Auth: API key in cookie `rove_session`

## Path parameters

- `id` string, required

## Request body

- object
  - `choice` 'allow' | 'allow_browse' | 'deny', required

## Response `200`

Successful response (Cache-Control: no-store)

- object
  - `redirect_to` string, uri, required: Where the browser goes next: the app, with the code or access_denied. Never stored.

## Other responses

- `400`: RFC 7807 invalid-params: unknown choice, or allow_browse not offered
- `401`: RFC 7807 owner-session-required: sign in
- `403`: RFC 7807 owner-origin-refused
- `409`: RFC 7807 oauth-request-completed
- `410`: RFC 7807 oauth-request-spent
- `429`: RFC 7807 rate-limit-exceeded: 30 decisions per minute per account; Retry-After
- `503`: RFC 7807 account-service-unavailable; Retry-After: 30

---

[API](https://skmtc.dev/roveapi/apis/rove-api.md) · [All operations](https://skmtc.dev/roveapi/apis/rove-api/llms.txt) · [OpenAPI document](https://skmtc.dev/roveapi/apis/rove-api/revisions/0e5d69bde586?raw)