Approve or deny access request

curl --request POST \
  --url https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action} \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action}"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action}"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "success": true,
  "message": "Access request approved",
  "access_request": {
    "id": "68d4a1f7c2b9e5001a7f3c60",
    "app_id": "6820f3a4e7b91d003c45a1f2",
    "email": "jane@acme.com",
    "status": "completed"
  }
}

Users

Approve or deny access request

This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.

Approves or denies someone’s request to join the app.

Approving a request from someone who confirmed their email adds them to the app’s users with the request’s role, and emails them that they’re in. A request made before email confirmation existed is marked approved instead, and the person joins when they next sign in. Someone who signed up with a password can’t be approved until they confirm their email. Approving an entry that’s already approved or completed sends the approval email again.

Denying deletes the request without notifying the person, and denying an invitation withdraws it. Denying a completed entry deletes only the entry; remove the person with Remove app user.

This endpoint accepts a personal API key belonging to a user with editor access to the app. A read-only key is refused, and workspace API keys are not accepted.

POST

api

apps

{app_id}

access-requests

{request_id}

{action}

Approve or deny access request

curl --request POST \
  --url https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action} \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action}"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action}"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://app.base44.com/api/apps/{app_id}/access-requests/{request_id}/{action}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "success": true,
  "message": "Access request approved",
  "access_request": {
    "id": "68d4a1f7c2b9e5001a7f3c60",
    "app_id": "6820f3a4e7b91d003c45a1f2",
    "email": "jane@acme.com",
    "status": "completed"
  }
}

Authorizations

Authorization

string

header

required

Personal access token, sent as Authorization: Bearer <token>. Each operation lists the permission it needs: read_only or full_access. A full-access token can call every operation. A read-only token can call only the operations that list read_only; anything else returns 403 read_only_credential_route_not_allowed.

Path Parameters

request_id

string

required

ID of the access request, as id in the response of List access requests.

action

enum<string>

required

approve to let the person in, or deny to delete the request.

Available options:

approve,

deny

app_id

string

required

ID of the app.

Response

The reviewed access request.

Doc-only: the handler returns a plain dict with exactly these keys.

success

boolean

required

Always true. A review that doesn't happen returns an error instead.

Example:

true

message

string

required

Access request approved or Access request denied.

Example:

"Access request approved"

access_request

ReviewedAccessRequest · object

required

Show child attributes

Base44 APIs

Apps API (Beta)

Workspace API (Beta)

Superagents API (Beta)

Monitoring API

Audit Logs API

Outbound webhooks

Approve or deny access request

Authorizations

Path Parameters

Response