Skip to main content

Approve or deny a pending device login (/activate)

POST 
/oauth/device/decision

Body: user_code, approve (true|false), optional ttl_days (1-365, default 90). Approving binds the device login to the signed-in user; the polling client then receives its token once. Web session only (API tokens get 403); same brute-force limits as the lookup; approvals count toward the 10 tokens/hour/user budget.

Responses​

Successful Response