Decide an authorization request

POST

/api/v1/oauth/authorize

curl --request POST \
  --url http://localhost:3000/api/v1/oauth/authorize \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "request": { "additionalProperty": "example" }, "allow": true, "projects": [ "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0" ], "project": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "scope": "propose" }'

Signed in: the decision and the request query it answers. Returns the URL to send the browser to, with a code or error=access_denied.

Any caller; the scope needed is checked on what it acts on.

Authorizations

• bearer
• session
• None

Request Body^required

Media typeapplication/json

One of:

object

object

request

required

object

key

additional properties

string

allow

required

boolean

projects

Array<string>

<= 100 items

project

string format: uuid

/^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/

scope

required

string

Allowed values: propose read write

object

object

request

required

object

key

additional properties

string

allow

required

boolean

Responses

200

Where to go

Media typeapplication/json

object

data

required

object

redirect

required

string

Example^generated

{
  "data": {
    "redirect": "example"
  }
}

default

An error

Media typeapplication/json

object

error

required

object

code

required

string

message

required

string

detail

Example^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "detail": "example"
  }
}