---
title: "Deny a device authorization request"
method: POST
path: "/oauth/device/deny"
---

# Deny a device authorization request

`POST /oauth/device/deny`

Rejects the pending device authorization identified by `user_code`, preventing
the device from obtaining an access token. Once denied, the device will
receive an `access_denied` error on its next token poll.

Requires a valid user session. The `user_code` must belong to a pending
authorization associated with the calling app. Attempting to deny an already
approved, already denied, or expired authorization returns a 400.

## Request body

- object
  - `user_code` string, required — User-facing verification code shown on the device. Identifies the pending authorization to deny.

## Response `200`

Successful response

- DeviceAuthorizationStatusResponse — The result of a completed OAuth 2.0 Device Authorization flow, indicating whether the user approved or denied the device's access request.
  - `status` string, required — Outcome of the device authorization request. One of `"approved"` (the user granted access) or `"denied"` (the user rejected or cancelled the request).

## Other responses

- `400` — Bad request
- `401` — Unauthorized

---

[API](https://skmtc.net/archastro/apis/archastro-platform-api.md) · [All operations](https://skmtc.net/archastro/apis/archastro-platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/archastro/archastro-platform-api/revisions/a8772b442f86/schema)