Approve or deny a resource grant on the hosted sign-in page
Changed onRequires the Identity origin, the browser hub cookie, a signed pending authorization request, and its selected identity. The decision spends the request in one conditioned write that records it, then redirects with code or access_denied, state and issuer; an approval the account cannot be read for redirects with server_error and spends the request too. The same decision for the same identity, submitted again while the request lives (a double click on the page), is answered with the same redirect once the code it carries is issued, and issues nothing more; any other decision of a decided request is refused. Resource grants always require an explicit decision, including after SSO. The page is a native form, so every refusal is a page in the browser window, never a JSON error.
Request
- Base URLhttps://api.sparkvault.com/v1
- AuthAPI key in cookie __Host-authsv_sso
- TypeScriptA function with typed inputs. Its response is checked against the schema.
Path parameters
The issuer account.
Request body application/x-www-form-urlencoded
Changes
- breaking
removed the media type
application/jsonfor the response with the status - breaking
removed the media type
application/jsonfor the response with the status - info
added the media type
text/htmlfor the response with the status - info
added the media type
text/htmlfor the response with the status - info
added the non-success response with the status
- breaking
- info
the response property
/became required for the status - info
the response property
/became required for the status - info
the response property
became required for the status - info
the response property
became required for the status - info
the response property
/became required for the status - info
the response property
/became required for the status - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status
- info