# Abort interaction

**POST /api/experience/abort**

Finish the current interaction with an `access_denied` OAuth error and return the URL that resumes the OIDC flow. Following it redirects the user agent back to the client's redirect URI with the error, preserving the authorization request's `state` and `iss`. The endpoint works at any interaction step, including consent, and is intended for flows where the client application owns the user-facing UI, so an abort surfaces there instead of on the hosted experience.


## Servers
- Logto endpoint address.: https://[tenant_id].logto.app (Logto endpoint address.)



## Parameters



### Body: application/json (object)

- **reason** (string(regex))
  Optional human-readable reason, forwarded to the client as the `error_description` parameter. Must be at most 256 characters and may only contain the characters RFC 6749 §4.1.2.1 allows in `error_description`: `%x20-21 / %x23-5B / %x5D-7E`, i.e. printable ASCII except `"` and `\`.



## Responses
### 200
The interaction has been aborted. Follow `redirectTo` to return the OAuth error to the client.

#### Body: application/json (object)
- **redirectTo** (string)


### 400
The request body is invalid, e.g. `reason` is longer than 256 characters or contains a character outside the allowed set; or the interaction session is missing or in an invalid state.


[Powered by Bump.sh](https://bump.sh)