List pending approval requests for the calling user's org (inbox)
GET
/api/sessions/approvals/pending
Return pending shell session approval requests for the organisation.
Gate
Caller must hold device.shell.approve for this org; 403 otherwise.
Cross-org isolation is enforced by scoping all queries to organization_id.
Returns
List of pending approvals ordered oldest-first (most urgent at the top). Each item embeds the requestor’s id and email so the inbox can display human-readable identities without a second request.
Errors
403 — caller lacks device.shell.approve role.
Authorizations
Parameters
Query Parameters
organization_id
required
string format: uuid
Responses
200
Successful Response
Array<object>
Public representation of a pending approval (TASK-S19-004).
Returned by GET /sessions/approvals/pending.
object
approval_id
required
string
device_id
required
string
expires_at
required
string format: date-time
requested_at
required
string format: date-time
requested_by
required
Requestor identity embedded in PendingApprovalResponse.
object
email
required
string
id
required
string
session_id
required
string
tier
required
string
422
Validation Error
object
detail
Array<object>
object
loc
required
Array
msg
required
string
type
required
string