| URL | https://<xid-useradm-baseurl>/<pid>/consent |
|---|
| Request | DELETE with URL path parameter pid (same as bankid_altsub) for user in question
|
|---|
| Authentication | Access Token as Bearer Token in Authorization Header |
|---|
| Success responseResponse | | Error response| Removal of consent was successful | 403 | Forbidden |
| Bearer token is not accepted for any reason | 400 | Bad |
Request | The pid is not an xID user or |
| resource access is insufficient (missing scope) |
Error responses contains further information on the reason according to standard. |
|---|
| Example | See below |
|---|
This method removes any consent registered on end user given by pid to use the xID service at the OIDC client identified by the azp in the Bearer Access Token. Hence, this method can only be use by an OIDC client to remove consents for its own xID-enabled service. There is no dialog shown to the end user.
...
