grant-management

Authorization grant management centralizes the lifecycle of grants, including consent handling and revocation across multiple flows. It exposes a REST API for organization-level oversight, enabling admin review, bulk revocation, and auditing.

Scope-based consent tracks per-client scope records to accurately enforce permissions. It operates within OIDC flows by managing ConsentClaims, tying user authentication and client applications to specific scopes for precise authorization control.

You can list and revoke active user consents using the organization-level grant management API. This REST API provides endpoints for detailing and revoking grants, allowing administrators to oversee and terminate active client permissions.

Yes, the grant management approach supports auditing consent through the AuthorizationGranted model. It provides a persistent representation of grants with createdAt and updatedAt timestamps, ensuring full auditability of the authorization lifecycle.

Yes, you can use this to handle bulk grant revocation and admin review for an IdP deployment. It manages per-user and per-client grants, allowing administrators to efficiently review active grants and execute bulk revocation across tenants.