> ## Documentation Index
> Fetch the complete documentation index at: https://docs.yourflexpay.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get consent details

> Returns consent request details for a consent token so a user can review and decide to approve or deny.



## OpenAPI

````yaml /openapi/idaas.openapi.json get /v1/consent/{consentToken}
openapi: 3.0.3
info:
  title: IDaaS – Identity as a Service API
  description: >
    ## Overview

    IDaaS provides globally unique, portable identity **tags** that travel with
    users across applications.  Each tag is a short handle (e.g. `@alice`) that
    can carry verified claims, participate in cross-application payments, and be
    federated to external identity providers.


    ## Key Capabilities

    - **Tags** – create, transfer, disable, and attach claims to identity
    handles.

    - **Cross-application payments** – send money from any tag on Application
    A   to any tag on Application B; each application has a single escrow
    wallet   tracked for end-of-day settlement.

    - **Ledger** – every completed payment produces an immutable double-entry  
    `DEBIT` / `CREDIT` pair recorded against application wallets.

    - **Webhooks** – real-time callbacks with HMAC-SHA256 signatures and  
    automatic retry (up to 3 attempts with exponential back-off).

    - **Settlement** – a scheduled end-of-day job aggregates daily wallet  
    movements and emits `SETTLEMENT_BATCH` Kafka events.


    ## Authentication

    1. Register an application: `POST /v1/applications`

    2. Exchange credentials for a JWT: `POST /v1/auth/token`

    3. Include the JWT as `Authorization: Bearer <token>` on all protected
    calls.


    ## Rate Limits

    | Endpoint | Limit |

    |---|---|

    | `POST /v1/auth/token` | 10 req / min per IP |

    | `POST /v1/transactions` | 60 req / min per application |

    | All other | 300 req / min per IP |
  contact:
    name: ReflexPay Platform Team
    url: https://yourflexpay.com
    email: integration@yourflexpay.com
  license:
    name: Proprietary
    url: https://yourflexpay.com/terms
  version: 1.0.0
servers:
  - url: https://staging-idaas.yourflexpay.com/api
    description: Staging
  - url: https://idaas.yourflexpay.com/api
    description: Production
security:
  - bearerAuth: []
tags:
  - name: Authentication
    description: Exchange client credentials for a JWT access token.
  - name: Encryption
    description: >
      JWE payload encryption – end-to-end security for API request bodies and
      webhook payloads.

      Each application receives an EC P-256 keypair at registration:

      - IDaaS encrypts **outbound webhooks** with the application's public key.

      - Applications encrypt **inbound request bodies** with the IDaaS public
      key.

      Algorithm: ECDH-ES+A256KW + A256GCM (JSON Web Encryption, RFC 7516).

      Use `GET /v1/keys/idaas` to fetch the IDaaS public key.

      Use `POST /v1/applications/keys/rotate` to rotate your application
      keypair.
  - name: Wallet
    description: View application escrow wallet balance and paginated ledger statement.
  - name: Subjects
    description: Manage the real-world entities (users / organisations) behind tags.
  - name: Tags
    description: Create, transfer, disable and resolve globally unique identity tags.
  - name: Claims
    description: Attach and revoke verifiable claims on tags.
  - name: Consent
    description: Issue and manage user consent tokens for claim federation.
  - name: Transactions
    description: Initiate, accept/reject, and query cross-application tag-to-tag payments.
  - name: Settlement
    description: Query end-of-day settlement batches and per-application net positions.
  - name: Webhooks
    description: >-
      Inspect outbound webhook delivery records for transactions. Each
      transaction has at most two webhook records: one RECEIVER (sent on
      initiation) and one SENDER (sent on acceptance/rejection/expiry).
externalDocs:
  description: IDaaS GitHub Repository
  url: https://github.com/reflexpay/idaas
paths:
  /v1/consent/{consentToken}:
    get:
      tags:
        - Consent
      summary: Get consent details
      description: >-
        Returns consent request details for a consent token so a user can review
        and decide to approve or deny.
      operationId: getConsentPage
      parameters:
        - name: consentToken
          in: path
          required: true
          schema:
            type: string
      responses:
        '200':
          description: Consent details returned
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ApiResponseConsentResponse'
        '404':
          description: Consent token not found or expired
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ApiResponseConsentResponse'
components:
  schemas:
    ApiResponseConsentResponse:
      type: object
      properties:
        success:
          type: boolean
        message:
          type: string
        errorCode:
          type: string
        data:
          $ref: '#/components/schemas/ConsentResponse'
        errors:
          type: array
          items:
            type: string
        timestamp:
          type: string
          format: date-time
    ConsentResponse:
      type: object
      properties:
        consentToken:
          type: string
        tagString:
          type: string
        requestingAppName:
          type: string
        requestingSubjectDisplay:
          type: string
        ownerDisplay:
          type: string
        tokenExpiresAt:
          type: string
          format: date-time
        expired:
          type: boolean
        claimState:
          type: string
  securitySchemes:
    bearerAuth:
      type: http
      description: >
        Obtain a token from `POST /v1/auth/token` using your `client_id` and
        `client_secret`, then enter `Bearer <token>` here.
      scheme: bearer
      bearerFormat: JWT

````