fyi.opensocial.approveAuthorization

Approve an app's pending request to sign in as a group. The app gets what the caller's roles in the group allow and nothing more, and every token it obtains is recorded as the caller's. Returns the URL to send the browser back to the app with.

Details · procedure
Kindprocedure
Authorityopensocial.fyi
Indexed

Procedure

procedure · POST

Input

application/json

group

requiredstring · did

requestUri

requiredstring
  • maxLength: 512

Output

application/json

redirectUrl

requiredstring · uri

Errors

ExpiredRequest

No description in schema.

Forbidden

No description in schema.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • An app's pending request to sign in as a group, as the caller would approve it: the app, the groups the caller may act for, and for each one what the caller's roles let the app do. Called by the console's approval page, with service auth from the caller's own PDS.

  • Decline an app's pending request to sign in as a group. Returns the URL to send the browser back to the app with, carrying access_denied.

  • Connect an assistant to the group as the caller: it may read what the caller can, and leave pages for the caller to look at: their own, and, with group.configure, the site's tabs'. Requires membership.

  • Approve a join request, giving the requester their roles. Requires admit. denyJoinRequest declines one.