Used by the login and consent application. Requires the signed-in user's Wingspan session token as a bearer token, an Origin header from the consent application, and the decisionNonce returned by POST /v3/platform/oauth/authorize-context. Records whether the user approved or denied the interaction. When approved, the request names the accountId and roleScope being granted, and a consent grant is created. Always returns 200. The result is either a Redirect (to the client's registered redirect URI, with an authorization code on approval or an error such as access_denied on denial) or a DirectError. The application then sends the user agent to that redirect. The response is not cacheable.