PingOne

Making decision requests to Authorize gateway instances

Before you make decision requests to gateway instances in your organization’s infrastructure, ensure that you’ve completed steps 1 - 5 in Setting up an Authorize gateway.

Use the POST localhost:8080/api/authorize operation to execute a decision request against a gateway instance. You can enforce client authentication on the /api/authorize endpoint by configuring a shared secret. Learn more in Authentication for Authorize gateway endpoints.

The request body requires the parameters property. Parameters consist of an attribute name and value separated by a colon. For example:

{
    "parameters": {
        "Amount": "990",
        "Account": "Basic Checking",
        "Payment.consentId": "{{consentID}}"
    },
}

Example request

curl --location 'http://localhost:8080/api/authorize' \
  --header 'Authorization: Bearer example-secret' \
  --header 'Content-Type: application/json' \
  --data '
{
  "parameters": {
    "Amount": "990"
  }
}'

Example response

{
   "id": "13234d13-7cc5-4394-a1a4-c685cbff4a5d",
   "authorizationVersion: {
       "id": "2027cfbe-4fcc-46f8-9c2f-d1f34983a43f"
    },
   "timestamp": "2024-04-25T21:56:53.572691726Z",
   "elapsedMicroseconds": 409,
   "status": {
       "code": "OKAY"
   },
   "decision": "PERMIT"
}