Submit consent decision
Submit the user’s Approve or Deny decision. Returns the client
redirect_uri to send the browser to — with a code (and state) on
approval, or error=access_denied on denial. Bound to the live
session with an access token and a DPoP proof.
Authorizations
Access token obtained from session refresh
DPoP proof JWT (RFC 9449) bound to the calling session's key. Required
alongside the access token on the OAuth login-UI endpoints
(/oauth/continue, /oauth/pending, /oauth/decision). The Web SDK
constructs and rotates this proof for you.
Body
Response
OK
The URL the browser should navigate to next.
"https://auth.example.com/oauth/consent?oauth_req=oar_01jqebhswje1ka1z7ahr9rfsgt"