Device Decision

POST

/api/v1/oauth/device/decision

curl --request POST \
  --url https://example.com/api/v1/oauth/device/decision \
  --header 'Content-Type: application/json' \
  --data '{ "user_code": "example", "approve": true }'

Approve/deny a device flow after the broker consents in the portal. The principal (and brokerage the token is scoped to) comes from the authenticated broker session, never the client. Scope is capped by the brokerage’s programmatic-access controls, same as the browser flow.

Request Body^required

Media typeapplication/json

DeviceDecision

object

user_code

required

User Code

string

approve

Approve

boolean

default: true

Responses

200

Successful Response

Media typeapplication/json

Example^generated

example

422

Validation Error

Media typeapplication/json

HTTPValidationError

object

detail

Detail

Array<object>

ValidationError

object

loc

required

Location

Array

msg

required

Message

string

type

required

Error Type

string

Example^generated

{
  "detail": [
    {
      "loc": [
        "example"
      ],
      "msg": "example",
      "type": "example"
    }
  ]
}