Poll for the user's answer

POST/v1/connections/token

RFC 8628 §3.4 polling with grant_type=urn:ietf:params:oauth:grant-type:device_code. Until the user decides: authorization_pending, or slow_down (and 5 more seconds to wait) when polled faster than interval. Then access_denied, expired_token, or the approved mandate's id, once: the device code is spent by the answer that carries it.

Headers

Content-Typeapplication/x-www-form-urlencodedRequired
Idempotency-KeystringRequired: 1 to 255 characters. A retry with the same key returns the first answer.

Request body

application/x-www-form-urlencoded

grant_typestringRequired
device_codestringRequired

Responses

200Approved: the mandate the user signed
400Not approved, or not yet
401No valid access token

200 response

mandate_idstringRequired
kindstringRequired: One of connectonce

curl -X POST https://api.keelson.finance/v1/connections/token \
  -H 'content-type: application/x-www-form-urlencoded' \
  -H "idempotency-key: $(uuidgen)" \
  --data '{"grant_type":"string","device_code":"string"}'

const res = await fetch("https://api.keelson.finance/v1/connections/token", {
  method: "POST",
  headers: {
    "content-type": "application/x-www-form-urlencoded",
    "idempotency-key": crypto.randomUUID(),
  },
  body: JSON.stringify({
    "grant_type": "string",
    "device_code": "string"
  }),
});
const data = await res.json();

Response · shape from the schema

{
  "mandate_id": "string",
  "kind": "connect"
}