Finish the current interaction with an access_denied OAuth error and return the URL that resumes the OIDC flow. Following it redirects the user agent back to the client's redirect URI with the error, preserving the authorization request's state and iss. The endpoint works at any interaction step, including consent, and is intended for flows where the client application owns the user-facing UI, so an abort surfaces there instead of on the hosted experience.
Body
Required
-
Optional human-readable reason, forwarded to the client as the
error_descriptionparameter. Must be at most 256 characters and may only contain the characters RFC 6749 §4.1.2.1 allows inerror_description:%x20-21 / %x23-5B / %x5D-7E, i.e. printable ASCII except"and\.Maximum length is
256. Format should match the following pattern:/^[ !\u0023-\u005B\u005D-\u007E]*$/.
curl \
--request POST 'https://[tenant_id].logto.app/api/experience/abort' \
--header "Content-Type: application/json" \
--data '{
"reason": "string"
}'
{
"reason": "string"
}
{
"redirectTo": "string"
}