pub async fn deny_device_verification(
pool: Data<PgPool>,
body: Json<DeviceDecisionBody>,
user: AuthUser,
) -> ControllerResult<HttpResponse>Expand description
Handles POST /device_verification/deny.
Session-authed. Marks the pending device code denied; the polling client then
receives access_denied at the token endpoint.