Request to implentment OAuth 2.0 Device Flow

[hanyuwei70]

Feature / Modification Request

Description

Device flow now is as RFC8628 which improves security because it prevented response_code accidently leakage.

Use case

All SSO scenario.

[Robbilie]

What do you want to use this for? This flow is intended for stuff like vehicles, tvs etc afak 🤔

[hanyuwei70]

For general purpose SSO. It can use EVE client as authentication method to prevent user input passwords on web browsers.

This would be useful for command line tools, headless tools on server processing pipelines and libraries/runtimes that have no easy capability to run a browser or redirect flow. Also currently EveMon on Linux/Wine/Mono has no HttpListener implemented that can actually listen for the redirect since Wine does not implement HTTP.sys for it. Somebody might also wish to create a smart TV application, or a plug-in for Kodi media player, or Qt Automotive and Android Auto. Perhaps a smart watch app too.

See https://oauth.net/2/grant-types/device-code/ for device grant flow.