---
title: "Consent Approve"
method: POST
path: "/api/oauth/consent/{consent_id}/approve"
tags: ["oauth"]
---

# Consent Approve

`POST /api/oauth/consent/{consent_id}/approve`

## Request

- Base URL: `https://zsign.io` (the document declares no server; this is the origin it was published from)
- URL: `https://zsign.io/api/oauth/consent/{consent_id}/approve`
- Auth: HTTP bearer

The consent_id IS the CSRF token: opaque, server-generated, single-use,
10-minute TTL. The Neon Auth JWT arrives in the Authorization header (not a
cookie), so a forged cross-origin POST cannot attach credentials.

## Path parameters

- `consent_id` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/zsign/apis/zsign-api.md) · [All operations](https://skmtc.dev/zsign/apis/zsign-api/llms.txt) · [OpenAPI document](https://skmtc.dev/zsign/apis/zsign-api/revisions/a674ac4137ba?raw)