Skip to main content

deny_consent

headless_lms_server::controllers::main_frontend::oauth::consent

Function deny_consent 

Source 
pub async fn deny_consent(
    pool: Data<PgPool>,
    form: Json<ConsentDenyQuery>,
    app_conf: Data<ApplicationConfiguration>,
) -> ControllerResult<HttpResponse>
Expand description

Handles /consent/deny when the user refuses to grant scopes.

This endpoint:

  • Redirects back to the client with error=access_denied and iss (RFC 9207).

ยงExample

POST /api/v0/main-frontend/oauth/consent/deny HTTP/1.1

{"client_id":"test-client-id","redirect_uri":"http://localhost","state":"random123"}

Response:

{"redirect_uri": "http://localhost?error=access_denied&state=random123&iss=..."}