# PostIssuingAuthorizationsAuthorizationApprove

From **Stripe API**.

`POST /v1/issuing/authorizations/{authorization}/approve`

<p>Approves a pending Issuing <code>Authorization</code> object. This request should be made within the timeout window of the <a href="/docs/issuing/controls/real-time-authorizations">real-time authorization</a> flow.</p>

## Parameters

### `authorization`

- Location: path
- Required: true
- Type: `string`
- maxLength: `5000`

## Request body

- Required: false
### `application/x-www-form-urlencoded`

- Type: `object`

```json
{"additionalProperties":false,"properties":{"amount":{"description":"If the authorization's `pending_request.is_amount_controllable` property is `true`, you may provide this value to control how much to hold for the authorization. Must be positive (use [`decline`](https://stripe.com/docs/api/issuing/authorizations/decline) to decline an authorization request).","type":"integer"},"expand":{"description":"Specifies which fields in the response should be expanded.","items":{"maxLength":5000,"type":"string"},"type":"array"},"metadata":{"anyOf":[{"additionalProperties":{"type":"string"},"type":"object"},{"enum":[""],"type":"string"}],"description":"Set of [key-value pairs](https://stripe.com/docs/api/metadata) that you can attach to an object. This can be useful for storing additional information about the object in a structured format. Individual keys can be unset by posting an empty value to them. All keys can be unset by posting an empty value to `metadata`."}},"type":"object"}
```

## Security

### `basicAuth`

- Type: `http`
- Request header: `Authorization`
- Scheme: `basic`
Send credentials in the `Authorization` request header using the `Basic` scheme.

Basic HTTP authentication. Allowed headers-- Authorization: Basic <api_key> | Authorization: Basic <base64 hash of `api_key:`>

### `bearerAuth`

- Type: `http`
- Request header: `Authorization`
- Scheme: `bearer`
- Bearer format: `auth-scheme`
Send the token in the `Authorization` request header using the `Bearer` scheme.

Bearer HTTP authentication. Allowed headers-- Authorization: Bearer <api_key>

## Responses

### `200`

Successful response.

### `application/json`

- Type: `object`

When an [issued card](https://stripe.com/docs/issuing) is used to make a purchase, an Issuing `Authorization`
object is created. [Authorizations](https://stripe.com/docs/issuing/purchases/authorizations) must be approved for the
purchase to be completed successfully.

Related guide: [Issued Card Authorizations](https://stripe.com/docs/issuing/purchases/authorizations).

```json
{"description":"When an [issued card](https://stripe.com/docs/issuing) is used to make a purchase, an Issuing `Authorization`\nobject is created. [Authorizations](https://stripe.com/docs/issuing/purchases/authorizations) must be approved for the\npurchase to be completed successfully.\n\nRelated guide: [Issued Card Authorizations](https://stripe.com/docs/issuing/purchases/authorizations).","properties":{"amount":{"description":"The total amount that was authorized or rejected. This amount is in the card's currency and in the [smallest currency unit](https://stripe.com/docs/currencies#zero-decimal).","type":"integer"},"amount_details":{"anyOf":[{"$ref":"#/components/schemas/issuing_authorization_amount_details"}],"description":"Detailed breakdown of amount components. These amounts are denominated in `currency` and in the [smallest currency unit](https://stripe.com/docs/currencies#zero-decimal).","nullable":true},"approved":{"description":"Whether the authorization has been approved.","type":"boolean"},"authorization_method":{"description":"How the card details were provided.","enum":["chip","contactless","keyed_in","online","swipe"],"type":"string"},"balance_transactions":{"description":"List of balance transactions associated with this authorization.","items":{"$ref":"#/components/schemas/balance_transaction"},"type":"array"},"card":{"$ref":"#/components/schemas/issuing.card"},"cardholder":{"anyOf":[{"maxLength":5000,"type":"string"},{"$ref":"#/components/schemas/issuing.cardholder"}],"description":"The cardholder to whom this authorization belongs.","nullable":true,"x-expansionResources":{"oneOf":[{"$ref":"#/components/schemas/issuing.cardholder"}]}},"created":{"description":"Time at which the object was created. Measured in seconds since the Unix epoch.","format":"unix-time","type":"integer"},"currency":{"description":"Three-letter [ISO currency code](https://www.iso.org/iso-4217-currency-codes.html), in lowercase. Must be a [supported currency](https://stripe.com/docs/currencies).","type":"string"},"id":{"description":"Unique identifier for the object.","maxLength":5000,"type":"string"},"livemode":{"description":"Has the value `true` if the object exists in live mode or the value `false` if the object exists in test mode.","type":"boolean"},"merchant_amount":{"description":"The total amount that was authorized or rejected. This amount is in the `merchant_currency` and in the [smallest currency unit](https://stripe.com/docs/currencies#zero-decimal).","type":"integer"},"merchant_currency":{"description":"The currency that was presented to the cardholder for the authorization. Three-letter [ISO currency code](https://www.iso.org/iso-4217-currency-codes.html), in lowercase. Must be a [supported currency](https://stripe.com/docs/currencies).","type":"string"},"merchant_data":{"$ref":"#/components/schemas/issuing_authorization_merchant_data"},"metadata":{"additionalProperties":{"maxLength":500,"type":"string"},"description":"Set of [key-value pairs](https://stripe.com/docs/api/metadata) that you can attach to an object. This can be useful for storing additional information about the object in a structured format.","type":"object"},"object":{"description":"String representing the object's type. Objects of the same type share the same value.","enum":["issuing.authorization"],"type":"string"},"pending_request":{"anyOf":[{"$ref":"#/components/schemas/issuing_authorization_pending_request"}],"description":"The pending authorization request. This field will only be non-null during an `issuing_authorization.request` webhook.","nullable":true},"request_history":{"description":"History of every time `pending_request` was approved/denied, either by you directly or by Stripe (e.g. based on your `spending_controls`). If the merchant changes the authorization by performing an [incremental authorization](https://stripe.com/docs/issuing/purchases/authorizations), you can look at this field to see the previous requests for the authorization.","items":{"$ref":"#/components/schemas/issuing_authorization_request"},"type":"array"},"status":{"description":"The current status of the authorization in its lifecycle.","enum":["closed","pending","reversed"],"type":"string"},"transactions":{"description":"List of [transactions](https://stripe.com/docs/api/issuing/transactions) associated with this authorization.","items":{"$ref":"#/components/schemas/issuing.transaction"},"type":"array"},"verification_data":{"$ref":"#/components/schemas/issuing_authorization_verification_data"},"wallet":{"description":"The digital wallet used for this authorization. One of `apple_pay`, `google_pay`, or `samsung_pay`.","maxLength":5000,"nullable":true,"type":"string"}},"required":["amount","approved","authorization_method","balance_transactions","card","created","currency","id","livemode","merchant_amount","merchant_currency","merchant_data","metadata","object","request_history","status","transactions","verification_data"],"title":"IssuingAuthorization","type":"object","x-expandableFields":["amount_details","balance_transactions","card","cardholder","merchant_data","pending_request","request_history","transactions","verification_data"],"x-resourceId":"issuing.authorization"}
```

### `default`

Error response.

### `application/json`

- Type: `object`

An error response from the Stripe API

```json
{"description":"An error response from the Stripe API","properties":{"error":{"$ref":"#/components/schemas/api_errors"}},"required":["error"],"type":"object"}
```

## Request examples

### cURL

```shell
curl --request POST \
  --url https://api.stripe.com/v1/issuing/authorizations/{authorization}/approve \
  --header 'content-type: application/x-www-form-urlencoded' \
  --data '{
  "amount": 1,
  "expand": [
    "string"
  ],
  "metadata": "string"
}'
```
