OAuth consent

The consent screen's own API (/oauth/authorize on the app host). A signed-in admin's cookie session only — a bearer token never approves an app. KudosCRM's own screen calls these; your app doesn't.

📄️Describe an authorization request

What the consent screen shows for an authorize query (§5.2, §10.2): the app, what it asks to see

📄️Allow or deny an authorization request

The admin's answer (§5.2). Re-runs every check of the read, then: