partner-oauth

Approve or deny an authorization transaction

Returns the absolute URL the browser must be sent to. The redirect target is always built from the server-side transaction record.

post/oauth/partner/transaction/consent

Request

  • Base URL
    https://api.rxfoodapp.com/api
  • URL
    https://api.rxfoodapp.com/api/oauth/partner/transaction/consent
  • Auth
    none required

Request body

approved_scopesstring[]

Optional. The subset of the requested scopes the patient chose to share. Intersected server-side with what the partner requested and the client is registered for, so it can only narrow. Omit to approve everything requested; selecting none is rejected (deny instead).

decision'approve' | 'deny' required
localestring
transaction_idstring required

Response

Decision recorded

decision'approve' | 'deny'
redirect_tostring

Changes

No recorded changes to this operation across all 19 revisions of this API.