Skip to main content
PATCH
Approve a sign-in session

Authorizations

Authorization
string
header
required

Send a dashboard session token, an account API key (agt_t), or a command-line credential (afc_) as a Bearer token. Each endpoint lists accepted credential types.

Path Parameters

session_id
string
required

Login session identifier (version 7 universally unique identifier, or UUID).

Body

application/json

PATCH /v1/auth/sessions/{session_id}/approve — a person clicked Approve.

ciphertext
string
required

Encrypted credential, forwarded without being decrypted by the server.

dashboard_public_key
string
required

The dashboard's public key, for the client's key agreement.

nonce
string
required

The nonce used to encrypt this credential.

verification_code
string
required

The six digits shown to the person, whose digest is what gets stored.

Response

OK

What approving answers with.

request_id
string
required

The request that recorded the approval.