Decline a sign-in
Uses the request and sends the app error=access_denied, or login_required and consent_required for prompt=none.
/oidc/requests/{id}/deny- Access
- Private code required
- Client
- Local or server client
Parameters#
| Name | Location | Meaning |
|---|---|---|
idRequired | Path | The request id: 43 characters from the consent page's address (`?req=`) or its meta element. |
JSON body#
| Name | Location | Meaning |
|---|---|---|
error | JSON | access_denied (default), login_required or consent_required. |
Request examples#
curl -fsS --json '{"error":"access_denied"}' "https://veil.rip/oidc/requests/$REQUEST_ID/deny"Response#
{redirect}.
| Field | Type | Meaning |
|---|---|---|
redirect | string | redirect_uri with error, error_description, state and iss. |
Response headers#
| Header | Value | Meaning |
|---|---|---|
Content-Type | application/json | JSON, also for errors. |
Cache-Control | no-store | Private: never cached. |
Errors#
API errors return an error object. Use error.code for program logic; error.message is English text for people and can change. Response and error guide
| HTTP | Code | Meaning and next step |
|---|---|---|
| 400 | invalid_json | The body is not a JSON object, contains duplicate keys or has trailing data. Send one valid JSON object with |
| 400 | invalid_parameter | A path, query or body field is missing, malformed or outside its accepted range. Correct the field named in |
| 404 | not_found | The requested card, key, alias, code or resource was not found. Check the identifier. Temporary codes and previews may already have expired or been used. |
| 410 | request_expired | The sign-in request was used or is older than 30 minutes. Go back to the app and start again. |
Shared request errors
| HTTP | Code | Meaning and next step |
|---|---|---|
| 429 | rate_limited | An anonymous, signed-request or API-key allowance was exceeded. Wait at least |
| 500 | internal_error | An unexpected server error occurred. Internal details are not returned. Retry reads with bounded backoff. Check write results before sending a new signed operation. |
| 503 | busy | The application has reached a temporary concurrency or database limit. Wait |