consent
POST /v1/oauth/consent
POST
/v1/oauth/consent
Authorizations
Section titled “Authorizations ”Request Body required
Section titled “Request Body required ”POST /v1/oauth/consent
object
authorize
required
boolean
granted_scopes
Granted scopes — may be a subset of what was requested. If omitted, all pending scopes are granted (the consent UI typically sends everything that was rendered). Unknown scopes are ignored; scopes not present in the pending request are rejected to prevent privilege escalation.
array | null
Responses
Section titled “ Responses ”Consent recorded; redirect URL returned
object
redirect
required
Absolute URL the browser should navigate to next. On approve this is
the client’s redirect_uri with ?code=...&state=...; on deny it is the
redirect_uri with ?error=access_denied&state=....
string
No pending request or invalid scope
Not authenticated