oauth

Consent Approve

The consent_id IS the CSRF token: opaque, server-generated, single-use, 10-minute TTL. The Neon Auth JWT arrives in the Authorization header (not a cookie), so a forged cross-origin POST cannot attach credentials.

post/api/oauth/consent/{consent_id}/approve

Request

  • Base URL: https://zsign.io (the document declares no server; this is the origin it was published from)
  • URL: https://zsign.io/api/oauth/consent/{consent_id}/approve
  • Auth: HTTP bearer

Path parameters

consent_idstring required

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.