v1

latestOpenAPI 3.1.0AGPL-3.0 license2026-07-1210336283.6 KB

OAuth

OAuth Authorization Decision

Process user's authorization decision (allow/deny)

post/oauth/authorize

Request body

client_idstring required

Client ID of the OAuth application

decision'allow' | 'deny' required

User's authorization decision

scopesstring[] required

Scopes the user has approved

redirect_uristring uri required

Redirect URI for OAuth callback

statestring

Opaque state parameter for CSRF protection

code_challengestring

Code challenge for PKCE (S256 method assumed)

teamIdstring uuid required

Team ID to authorize the application for

Example request

{
  "client_id": "mid_client_abcdef123456789",
  "decision": "allow",
  "scopes": [
    "transactions.read",
    "invoices.read"
  ],
  "redirect_uri": "https://myapp.com/callback",
  "state": "abc123xyz789_secure-random-state-value",
  "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
  "teamId": "123e4567-e89b-12d3-a456-426614174000"
}

Response

Authorization decision processed, returns redirect URL

redirect_urlstring uri required