Saltar al contenido

Approve a expense

Módulo Finance

POST/expenses/{id}/approveexpenses.approve

Records an approval decision on the expense. The submitter cannot approve it. Spend authority and separation of duties are enforced in the approval RPC; a refusal returns 422 and names the rule. Requires `Idempotency-Key`; a replay returns the original response. A rule that refuses the request returns 422 with `refusal` and `reason`.

  • Requiere la capacidad finance.expense.approve.
  • Alcances de OAuth: finance.
  • Envía el encabezado Idempotency-Key. Una repetición con la misma clave devuelve la respuesta original.
  • Estados de error: 400, 401, 404, 409, 422, 429. Los errores son detalles de problema RFC 9457.

Parámetros de ruta y de consulta

expenses.approve: Parámetros de ruta y de consulta
CampoTipoObligatorioDescripción
idstring (uuid)SíIdentifier of the expense.

Respuesta 200: Expense

expenses.approve: Expense
CampoTipoObligatorioDescripción
idstring (uuid)SíIdentifier of the expense.
org_idstring (uuid)SíIdentifier of the owning organization, derived from the parent row and never accepted from the caller.
created_atstring (date-time)SíWhen the row was created.
created_bystring (uuid) | nullSíIdentifier of the person who created the row; null when a seed, platform or system process created it.
updated_atstring (date-time)SíWhen the row was last updated.
updated_bystring (uuid) | nullSíIdentifier of the person who last updated the row; null when a seed, platform or system process updated it.
budget_line_idstring (uuid)SíIdentifier of the budget line.
submitter_person_idstring (uuid) | nullSíIdentifier of the person who submitted the expense.
descriptionstringSíExpense description.Restricciones: length 1 to 300
amount_minorinteger (int64) | nullSíExpense amount. Integer minor units of the resource currency; null means unpriced, never zero.
currency_codestringSíISO 4217 currency code of every money field.Restricciones: pattern ^[A-Z]{3}$
incurred_onstring (date)SíWhen it was incurred.
expense_state"Proposed" | "Approved" | "Rejected" | "Paid" | "Canceled"SíExpense state.
counterparty_idstring (uuid) | nullSíIdentifier of the counterparty paid, when it is not the submitter.
{
  "id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "org_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "created_at": "2026-10-08T14:30:00Z",
  "created_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "updated_at": "2026-10-08T14:30:00Z",
  "updated_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "budget_line_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "submitter_person_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "description": "Gaffer tape, 12 rolls",
  "amount_minor": 14388,
  "currency_code": "USD",
  "incurred_on": "2026-10-08",
  "expense_state": "Proposed",
  "counterparty_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f"
}

Ejemplos de código

curl -X POST "$XOS_BASE_URL/expenses/0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f/approve" \
  -H "Authorization: Bearer $XOS_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)"
const { data } = await xos.expenses.approve("0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f");
response = xos.expenses.approve("0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f")
xos expenses approve 0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f