Saltar al contenido principal
POST
Approve or reject an operation-approval workflow (checker)

Autorizaciones

Authorization
string
header
requerido

JWT bearer token issued by the identity provider.

Encabezados

Authorization
string

Bearer JWT. Must be a normal-user principal (the CHECKER): an application token is refused with 403, and any other token type is refused with 401 at the gate. Must differ from the maker (four-eyes).

Parámetros de ruta

approvalId
string
requerido

The workflow being decided.

Cuerpo

application/json

The checker's decision.

decision
enum<string>
requerido

The checker's decision.

Opciones disponibles:
approved,
rejected
note
string

Optional decision reason (≤500 chars).

Respuesta

OK

action
enum<string>
requerido

The opaque resolution proposed; the Cabine API never interprets it.

Opciones disponibles:
ATTACH_BACEN_RESOURCE,
CONFIRM_NOT_APPLIED
Ejemplo:

"ATTACH_BACEN_RESOURCE"

approvalId
string
requerido

The workflow's own identity — use this in GET and decision paths.

Ejemplo:

"9b2f6c1e-4d7a-4e83-a5c0-3f1d8e2b7a46"

at
string<date-time>
requerido

When the latest event was recorded (RFC 3339).

decisionDeadline
string<date-time>
requerido

Past this instant only 'expired' may follow 'requested'.

digest
string
requerido

Hex SHA-256 the maker echoed (the SPI operation's requestFingerprint).

maker
object
requerido

Server-extracted proposer identity.

operationId
string
requerido

The SPI DICT/MED operationId this approval concerns.

Ejemplo:

"5c8e1a47-2b9d-4f60-8e3a-d1f47b09c625"

state
enum<string>
requerido

Latest workflow lifecycle action.

Opciones disponibles:
requested,
approved,
rejected,
expired
Ejemplo:

"requested"

bacenResourceId
string

Set only when action=ATTACH_BACEN_RESOURCE.

checker
object

Server-extracted decider identity, once decided.

delivery
object

The delivery status of the decision sent to Lerian SPI, once at least one attempt has run.

note
string

Optional operator-authored reason.