Skip to content
AppHandoff AppHandoff Docs

OAuth consent proxy

POST
/oauth/consent
 
curl --request POST \
  --url https://example.com/api/oauth/consent \
  --header 'Content-Type: application/json' \
  --cookie sb-access-token=<sb-access-token> \
  --data '{}'

Claims the authorization and proxies the decision to Supabase OAuth. Requires a first-party portal session JWT in the Authorization header: a delegated OAuth access token is refused with 401, so a client cannot approve its own authorization or widen its own scopes.

Authorizations

Section titled “Authorizations ”

Request Body required

Section titled “Request Body required ”
Media type application/json
object

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Consent result

Media type application/json
object

400

Section titled “400 ”

Invalid request

Media type application/json
object
error
required

Human-readable error message

string
code

Stable machine-readable error code for client branching

string
fieldErrors

First validation message per field path

object
key
additional properties
string
issues

Structured validation issues (Zod)

Array<object>
object
path
required
string
message
required
string
retryAfter

Seconds until rate limit resets (429 responses)

number

401

Section titled “401 ”

Not authenticated

Media type application/json
object
error
required

Human-readable error message

string
code

Stable machine-readable error code for client branching

string
fieldErrors

First validation message per field path

object
key
additional properties
string
issues

Structured validation issues (Zod)

Array<object>
object
path
required
string
message
required
string
retryAfter

Seconds until rate limit resets (429 responses)

number
reconnect

True if re-linking GitHub may fix the issue

boolean