Complete pending consent with a signed user session

POST /oauth/authorize

The website uses this endpoint after sign-in. Agents open the authorization URL and wait for the user; they never manufacture the user session.

Requires a signed user/session or the existing authenticated client flow. The anonymous DCR delegated device profile cannot invoke this operation.

Required scope

Any authenticated access token

One-time browser continuation URL. Navigate the browser to receive a 302 to the registered callback.

400

Invalid, expired or consumed request.

Check the request fields and any validation details, then correct the payload.

401

User sign-in required.

Obtain a valid access token, then retry.