---
title: "Confirm change request authorization"
method: POST
path: "/v1/change_requests/{change_request_id}/confirm"
tags: ["Change requests"]
---

# Confirm change request authorization

`POST /v1/change_requests/{change_request_id}/confirm`

Confirms a change request by validating an SMS OTP or device signature provided by the customer. Your solution must collect either the OTP or the signature from the customer in its frontend after calling the `POST Request authorization for a change request` method.<br> When the change request is successfully confirmed, the response will include metadata around the created/updated resource, a `response_body` with its properties, and the relevant `response_code` for the creation/update operation.<br> **Note:** If the `delivery_method` of the change request authorization was `static` (i.e., for testing purposes), then set the value of `tan` to `212212`.

## Path parameters

- `change_request_id` string, required

## Request body

- object
  - `device_id` string — (If the `delivery_method` was `device_signing`) The ID of the customer's bound device used for authorization.
  - `signature` string — (If the `delivery_method` was `device_signing`) The hex-encoded signature generated by signing the `text_to_sign` with the device's public key.
  - `person_id` string — (If the `delivery_method` was `mobile_number`) The ID of the person who received the SMS OTP for authorization.
  - `tan` string — (If the `delivery_method` was `mobile_number`) The six-digit OTP value that the person received via SMS.
  - `device_data` string — Base64 encoded device data as provided by Seon SDK. Details of Seon SDK integration can be found in the [device monitoring guide](https://docs.solarisgroup.com/guides/kyc/device-monitoring/).

## Response `200`

Successful result of the operation

- SolarisDecoratorsChangeRequestComplete
  - `id` string — ID of the change request.
  - `status` 'AUTHORIZATION_REQUIRED' | 'CONFIRMATION_REQUIRED' | 'ACCEPTED' | 'COMPLETED' | 'FAILED' — The current status of the change request.
  - `updated_at` string, date-time — Timestamp from when the change request was last updated.
  - `response_body` object — The response body of the changed entity. The exact properties contained in this object depend on the resource that was created or updated.
    - `id` string — ID of the created/updated resource.
  - `response_code` integer — The final HTTP status from the initial creation/update request that originally required the change request.

## Other responses

- `400` — An error occurred on the client side.
- `403` — You are not authorized to perform this action.
- `422` — Signature verification failure.
- `429` — SMS request rate limit exceeded for the given mobile number.
- `500` — Internal server error.
- `default` — Unexpected error

---

[API](https://skmtc.net/solarisgroup/apis/device-management.md) · [All operations](https://skmtc.net/solarisgroup/apis/device-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/solarisgroup/device-management/revisions/80dd46738839/schema)