app.oauth_grants
TableRow level security on
Consent a person gave an OAuth app: the capability groups it may use on their behalf. The person revokes it by deleting it; a new consent replaces the old one.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org, derived from app.oauth_apps on insert; never accepted from the caller and never changed.References app.organizations.id |
| oauth_app_id | uuid | No | App consented to.References app.oauth_apps.id |
| person_id | uuid | No | Person who consented, set from the session.References app.people.id |
| scopes | text[] | No | Capability groups granted (first segments of capability codes, as API key scopes). |
| granted_at | timestamp with time zone | No | When consent was given. |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |