Skip to content

Device Authorization Grant #962

Open
@oliamb

Description

@oliamb

Hey, thanks a lot for the awesome library!

I just discovered this evening an extension to OAuth2, which is the Device Authorization Grant, defined in RFC https://tools.ietf.org/html/rfc8628.

I dig a bit on how rfc8628 relates to rfc6749 (OAuth2). I thought it was through the Native Application update at first. But no, they are just leveraging the extension grant from OAuth2, which is not supported either by the django-oauth-toolkit.

The Device Authorization grant looks super interesting to authenticate native applications, much simpler than Authorization Code with PKCE and inter-application URL redirections. I am wondering if supporting it directly or through supporting the extension grant has been discussed already? (I did not find any reference)

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions