Menu AuthGuardHelp centre
Portuguêsauthguard.pt

Developers · Approval requests

Read a request's decision and cancel it

  • 1 min read
  • SaaS · Self-hosted

After creating a request, the system learns the decision by reading the request or receiving a webhook. Webhooks are preferable; reading suits scripts and serves as confirmation.

Reading the request

GET /v1/intents/{intent_id} with the intents:read scope returns:

FieldValues
statepending, approved, denied, expired, cancelled
decidedAtWhen it was decided
decisionFactorpasskey, or device for a phone decision
receipt.statusawaiting_signature then signed

Poll with growing delays (for example 2 seconds, doubling to 30) until the state is no longer pending.

Cancelling

POST /v1/intents/{intent_id}/cancel withdraws a pending request. A request already decided, expired or cancelled gives 409 conflict; treat it as "already over" and read the state.

Error answers

AnswerCause
401Missing or expired token: get another
403 insufficient_scopeThe token lacks intents:read
404The request belongs to another client or does not exist
409Incompatible state (for example cancelling a decided request)

Before running the operation

  1. Check that state is approved.
  2. Verify the signed receipt (see Verify receipts).
  3. Only then run the operation in your system.

Decisions and policy

Decisions on third-party requests are not yet evaluated by the organization's access policy. A recovery session cannot decide.

Error codes in this article

Article referencedev-intents-statusquote it to support to identify this article. Checked against the product at commit 5f6607a8.