身分驗證

Submit the consent decision and mint the extension’s session token.

Submitted by the consent screen’s own form, not called directly. On decision=allow, 302-redirects to redirect_uri with a session token in the URL fragment (never the query, so it is never logged or sent to a server); on anything else, redirects with error=access_denied. Not a JSON endpoint.

# submitted by the consent page's own form, not called directly