Approve a tap intent with this tap
For a tap page you host yourself: approves a tap intent with the session’s tap and sends tap_intent.approved. Authorized by the tap session token alone. Send the code the person typed when the tap intent has code_required. Call it only after the person confirms on your page, then send them to redirect_url. Your server then consumes the approval with its secret key. The same tap can repeat the call while the tap intent is approved; another tap gets tap_intent.already_approved, any tap gets tap_intent.already_consumed once your server consumed it, and tap_intent.expired once the approval lapsed.
Authorizations
Use Authorization: Bearer end_sess_* for V2 browser session tokens (e.g. end_sess_ZW5kc3RhdGUtZXhhbXBsZS1zZXNzaW9uLXRva2VuAAA).
Path Parameters
^tapi_[0-9a-f]{32}$"tapi_3f9c1b7a2d4e4f60a1b2c3d4e5f60718"
Body
The code the person typed. Required when the tap intent has code_required.
^[0-9]{6}$"482913"

