OAuth · Deny authorization | Modular DS

Denies the pending OAuth authorization from the dashboard consent screen (Passport session endpoint).

Same contract as the approve: single-use auth_token, dashboard session cookie plus X-XSRF-TOKEN.

Responses:

With Accept: application/json: 200 {"redirect": url} — the client callback carrying error=access_denied and state, delivered to the client the same way it receives a code (the SPA navigates top level).
Without it: 302 with the same URL in Location.
Expired, unknown or reused auth_token: 403.

Host root, no /api prefix.

Denies the pending OAuth authorization from the dashboard consent screen (Passport session endpoint). Same contract as the approve: single-use `auth_token`, dashboard session cookie plus `X-XSRF-TOKEN`. **Responses**: - With `Accept: application/json`: **200** `{"redirect": url}` — the client callback carrying `error=access_denied` and `state`, delivered to the client the same way it receives a code (the SPA navigates top level). - Without it: **302** with the same URL in `Location`. - Expired, unknown or reused `auth_token`: **403**. Host root, no `/api` prefix.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Request

This endpoint expects an object.

auth_tokenstringRequired

Response

redirectstringformat: "uri"

1	curl -X DELETE https://https//https/oauth/authorize \
2	-H "Authorization: Bearer <token>" \
3	-H "Content-Type: application/json" \
4	-d '{
5	"auth_token": "<auth_token from the consent screen URL>"
6	}'