New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Device Flow / Device Authorization Grant #124

Open

omz13 opened this issue Oct 4, 2023 · 2 comments

omz13 commented Oct 4, 2023

add per RFC8628

Member

dshanske commented Nov 11, 2023

This brings in a point...what differences would an IndieAuth implementation need from a standard implementation of the RFC?

We added in refresh token flow and PKCE for security reasons.

Author

omz13 commented Nov 13, 2023

The device needs to ask the user for their domain, then does endpoint discovery per §4.1.1 IndieAuth, then initiates the request per §3.1 RFC8628

What does the device use for client_id?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment