Spree Admin SDK
Approve a request
Records the grant and answers with where to send the browser. The scopes recorded are the ones this person may hand over, applied here rather than taken from the request — a grant is a standing ceiling, so one recorded too wide would widen on its own the day that person is promoted.
POST
Spree Admin SDK
Authorizations
JWT token for admin user authentication
Query Parameters
The application's client id
Must match what the application registered
Always code
Space-delimited permission keys, the same vocabulary as API-key scopes
PKCE challenge. Required: these clients are public
Always S256
RFC 8707: which protected resource the token is for
Response
200 - application/json
approved

