You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The OAuth 2.0 Device Authorization Grant (RFC 8628) brings OAuth to devices with internet connectivity but limited input
8
8
capabilities. This flow is designed for smart TVs, streaming devices, IoT hardware, printers, remote terminal sessions, AI agents, and other connected devices
9
9
where typing credentials or opening a browser isn't practical or possible. Here's how it works: the device to be authenticated displays a URL and a short code, prompting
10
-
you to open that URL on your phone or computer to authorize access. The two devices don't need to communicate directly—the authorization
10
+
you to open that URL on your phone or computer to authorize access. After successful authorization, the device will get an access and (optionally) a refresh token. The two devices don't need to communicate directly—the authorization
11
11
happens through the OAuth provider.
12
12
13
13
This document provides an overview of the Ory's device authorization grant flow, with a step-by-step example of its implementation, configuration
0 commit comments