Authorize/Consent Screen Settings

The Authorize/Consent Screen determines whether users are prompted to grant or deny permissions during the OAuth authorization process.

To configure:

  • Navigate to the Configurations tab.
  • Under Authorize/Consent Prompt, locate the toggle for this option.
  • Turn the toggle ON to enable the consent prompt.
    consent-screen-settings

When enabled, users will be asked to either Allow or Deny the access permissions requested by the client application.

When the consent screen is enabled, its behavior can be controlled using the prompt parameter in the OAuth Authorize Request.

The prompt parameter supports three possible values:

  • allow
  • consent
  • login
  1. prompt= allow
    When prompt=allow, the consent screen is skipped, and the system automatically assumes the user’s response as Allow.

Note:

  • This option does not store the actual user response.
  • If the prompt parameter is not passed, the consent screen will appear for users who haven’t previously clicked Allow.

SAMPLE REQUEST:

    GET http://<wp_base_url>/wp-json/moserver/authorize
        ?response_type=code
        &client_id= <client_id_goes_here>
        &redirect_uri= <callback_url>
        &scope= <permissions_requesting>
        &state= <security_token>
        &prompt=allow
  1. prompt=consent
    When prompt=consent, the consent screen is always displayed, even if the user has previously clicked Allow.

SAMPLE REQUEST:

    GET http://<wp_base_url>/wp-json/moserver/authorize
        ?response_type=code
        &client_id= <client_id_goes_here>
        &redirect_uri= <callback_url>
        &scope= <permissions_requesting>
        &state= <security_token>
        &prompt=consent
  1. prompt=login
    When prompt=login, the user is forced to log in again, even if they already have an active session.This ensures a fresh authentication before granting access.

Note:

  • This option respects previously saved user responses.
  • If a user has already clicked Allow before, the system will automatically authorize the application after re-login.

SAMPLE REQUEST:

    GET http://<wp_base_url>/wp-json/moserver/authorize
        ?response_type=code
        &client_id= <client_id_goes_here>
        &redirect_uri= <callback_url>
        &scope= <permissions_requesting>
        &state= <security_token>
        &prompt=login