Deny a CIBA request.

POST

/api/ciba/deny

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/ciba/deny \
  --header 'Content-Type: application/json' \
  --cookie authrim_session=<authrim_session> \
  --data '{ "auth_req_id": "auth_req_123", "user_id": "user_123" }'

Authorizations

• userSessionCookie

Request Body ^required

Media type application/json

object

auth_req_id

required

string

user_id

string

sub

string

nonce

string

reason

string

Example

{
  "auth_req_id": "auth_req_123",
  "user_id": "user_123"
}

Responses

200

Successful JSON response.

Media type application/json

object

success

required

boolean

message

string

error

string

error_description

string

retry_after

integer

Example

{
  "success": true,
  "message": "Authentication request approved"
}

401

An authenticated end-user session is required.

Media type application/json

object

error

required

string

error_description

required

string

key

additional properties

Example

{
  "error": "login_required",
  "error_description": "Authentication is required"
}

403

The authenticated user does not own the CIBA request.

Media type application/json

object

error

required

string

error_description

required

string

key

additional properties

Example

{
  "error": "access_denied",
  "error_description": "Insufficient permissions"
}