Revoke own consumer direction; outstanding tokens must fail subsequent online data checks

POST/users/me/data-consents/{consent}/revocations

Own active customer session and reason required; repeat revocation is harmless. Subsequent token exchange and online checks refuse revoked direction, including already issued tokens. Fresh step-up is not required to stop disclosure.

Path parameters

consentstringRequired

Headers

Idempotency-KeystringOptional

Send on every write that creates or changes money or state; a replay with the same key returns the original result with 200.

Body parameters

reasonstringRequired

Returns

200 OK

created_atstring · date-timeRequired

customer_idstringRequired

Example cust_2tVh8nqLxq4GbDe0K1F6S9zRcWm

grantobjectRequired

8 child attributes

disclosurestringRequired

disclosure_sha256stringRequired

fieldsarray of stringsRequired

history_daysintegerRequired

max_consent_daysintegerRequired

privacy_policy_idstringRequired

privacy_rule_idstringRequired

purposestringRequired

idstringRequired

provider_namestringRequired

provider_subjectstringRequired

requestobjectRequired

8 child attributes

account_idsarray of stringsRequired

confirmedbooleanRequired

disclosure_sha256stringRequired

expires_atstring · date-timeRequired

fieldsarray of stringsRequired

provider_idstringRequired

provider_versionintegerRequired

purposestringRequired

revoked_atstring · date-time or nullOptional

session_idstringRequired

Example sess_2tVh8nqLxq4GbDe0K1F6S9zRcWm

user_idstringRequired

Example user_2tVh8nqLxq4GbDe0K1F6S9zRcWm

versionintegerRequired

Errors

Every error is a problem document with a stable code. See Errors.

400401403404409412413422424429500503