---
title: "OAuth Authorization Decision"
method: POST
path: "/oauth/authorize"
tags: ["OAuth"]
---

# OAuth Authorization Decision

`POST /oauth/authorize`

Process user's authorization decision (allow/deny)

## Request body

- object
  - `client_id` string, required — Client ID of the OAuth application
  - `decision` 'allow' | 'deny', required — User's authorization decision
  - `scopes` string[], required — Scopes the user has approved
  - `redirect_uri` string, uri, required — Redirect URI for OAuth callback
  - `state` string — Opaque state parameter for CSRF protection
  - `code_challenge` string — Code challenge for PKCE (S256 method assumed)
  - `teamId` string, uuid, required — Team ID to authorize the application for

## Response `200`

Authorization decision processed, returns redirect URL

- object
  - `redirect_url` string, uri, required

## Other responses

- `400` — Invalid request
- `401` — Unauthorized

---

[API](https://skmtc.net/midday-ai/apis/midday-api.md) · [All operations](https://skmtc.net/midday-ai/apis/midday-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/midday-ai/midday-api/versions/c0df9243c1b0/schema)