Authorization Decision
POST
/internal/slash/connections/{connectionBizId}/authorization-decisions NoneEvaluates a card authorization request and returns an approval or denial decision. This is an internal endpoint called by the Slash platform webhook system.
Required Headers
| Header | Example Value | Description |
|---|---|---|
| Content-Type | application/json | Request content type |
| Accept | application/json | Expected response type |
| X-Client-Hash | Client device fingerprint | |
| Accept-Language | en, zh, zh-Hant, ja, vi | Response language (default: en) |
| X-Workspace-Id | Target workspace ID |
Request Parameters
| Name | Type | Required | In | Description |
|---|---|---|---|---|
connectionBizId | String | Required | path | Slash connection business ID. Path parameter |
authorizationId | String | Optional | body | Authorization request ID. |
eventId | String | Optional | body | Webhook event ID. |
eventType | String | Optional | body | Webhook event type. |
signature | String | Optional | body | Webhook signature for verification. |
occurredAt | Long | Optional | body | Timestamp when the event occurred (epoch ms). |
receivedAt | Long | Optional | body | Timestamp when the event was received (epoch ms). |
payload | Object | Optional | body | Raw authorization event payload. |
rawPayload | String | Optional | body | Raw payload as string for signature verification. |
cardBizId | String | Optional | body | Internal card business ID. |
cardId | String | Optional | body | Slash card ID. |
amount | Long | Optional | body | Transaction amount in cents. |
currency | String | Optional | body | Transaction currency code. |
Success Response
Declined 200
{
"decision": "DECLINED",
"approvedAmount": null,
"reason": "Insufficient balance"
}Error Responses
| HTTP Status | Code | Description |
|---|---|---|
| 404 | 4040 | Connection not found |
| 500 | 5000 | Internal processing error |
Notes
- This endpoint does NOT return the standard
ApiResponsewrapper. It returnsSlashAuthorizationDecisionHttpResponsedirectly. - The response is consumed by the Slash platform to approve or decline card authorization requests.
- The
decisionfield contains values such asAPPROVEDorDECLINED.