We fixed a bug in the API approval flow that caused 4xx/5xx responses or left approvals unregistered, resulting in inconsistent document/request states.
This update enforces permission and token scope checks, validates the payload and identifiers, and adds idempotent handling to avoid duplicate operations.
With this fix, approval calls made through the API are reliable, and the status updates immediately to reflect the operation’s outcome.