Submit the OAuth consent decision (Allow / Deny)
OAuth
Submit the OAuth consent decision (Allow / Deny)
Processes the consent form. On Allow, mints a single-use, 60-second authorization code bound to the client, the exact redirect_uri, and the PKCE challenge, then redirects back to the client with code + state. On Deny, redirects with error=access_denied. CSRF-protected (SameSite=Lax cookie + signed token); the acting org is bound here and is immutable for tokens minted from the code.
POST
Submit the OAuth consent decision (Allow / Deny)
Body
application/x-www-form-urlencoded
Available options:
allow, deny Available options:
S256 Available options:
code Response
Redirect back to the client with code+state, or with an OAuth error.
OAuth 2.1 authorization endpoint (renders the consent screen)OAuth 2.0 Dynamic Client Registration (RFC 7591)