GET/api/apps/{app_id}/check-authorizationAuthenticated

Check whether the caller authorized an app

Reports whether the signed-in user has already authorized the client application to receive tokens on their behalf. The auth server's own app is always reported as authorized.

operationId get_api_apps_app_id_check_authorizationClient applications

Authentication & permissionsAuthenticated

Any authenticated user

Accepted credentials: Auth server session (refresh token cookie)cookie "refresh_token_<auth_server_app_id>"
Access token (cookie)cookie "access_token_<auth_server_app_id>"
Access token (Bearer)Authorization: Bearer <JWT>
Who may call: Any authenticated user

Path parameters

Name	Type	Description
app_id*	string	Client application id

Responses

application/json

AppAuthorizationStatusResponse

Property	Type	Description
success*	true
authorized*	boolean	Whether the caller has authorized the app to receive tokens on their behalf

JSONExample

"success"true

"authorized"true

Example request

bashcurl

curl -X GET 'https://auth.schemavaults.com/api/apps/<app_id>/check-authorization' \
  -b 'refresh_token_<auth_server_app_id>=<value>'

Authentication & permissionsAuthenticated

Path parameters

Responses

200The authorization status

400The request failed validation (issues lists the offending fields) or was refused by the handler

401No valid session cookie, access token cookie or bearer access token was presented, or the token was revoked

403The account is disabled, or the credential is valid but not allowed to perform this operation

500Failed to check the authorization status

Example request