Skip to main content
POST
Record a consent decision

Authorizations

Authorization
string
header
required

The end-user's Firebase session token. Used only by the in-session consent endpoints (/consent), which run inside the SideShift web app.

Body

application/json
request_id
string
required
csrf_token
string
required
decision
enum<string>
required
Available options:
allow,
deny
company_id
string

The default tenant. Required when allowing access.

company_ids
string[]

Optional explicit accounts to connect, with no count limit. Must include company_id. Each account is access-checked and gets its own revocable grant. Omit for a single account.

Minimum array length: 1
Required string length: 1 - 128
granted_scopes
string[]

Subset of the requested scopes the user approved (allow only).

Response

The redirect target for the browser to follow back to the client.

redirect
string<uri>
decision
enum<string>
Available options:
allow,
deny