v1

latestOpenAPI 3.0.02026-08-04891301.4 MB

Deny a device authorization request

Rejects the pending device authorization identified by user_code, preventing the device from obtaining an access token. Once denied, the device will receive an access_denied error on its next token poll.

Requires a valid user session. The user_code must belong to a pending authorization associated with the calling app. Attempting to deny an already approved, already denied, or expired authorization returns a 400.

post/oauth/device/deny

Request body

user_codestring required

User-facing verification code shown on the device. Identifies the pending authorization to deny.

Example request

{
  "user_code": "string"
}

Response

Successful response

statusstring required

Outcome of the device authorization request. One of "approved" (the user granted access) or "denied" (the user rejected or cancelled the request).

Example response

{
  "status": "approved"
}