Sign in
partner-oauth

Approve or deny an authorization transaction

Returns the absolute URL the browser must be sent to. The redirect target is always built from the server-side transaction record.

post/oauth/partner/transaction/consent

Request body

approved_scopesstring[]

Optional. The subset of the requested scopes the patient chose to share. Intersected server-side with what the partner requested and the client is registered for, so it can only narrow. Omit to approve everything requested; selecting none is rejected (deny instead).

decision'approve' | 'deny' required
localestring
transaction_idstring required

Response

Decision recorded

decision'approve' | 'deny'
redirect_tostring

Changes