From the course: Web Security: OAuth and OpenID Connect

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

When should you use this?

When should you use this?

- [Narrator] So now, when do we use the device authorization flow? If we go back to the decision tree from our grant type video, we end up on a different branch. First, we have a user involved, which also means we can use this grant type for OpenID Connect in addition to regular OAuth. Next, do we have a browser involved? No, and this is where the device grant type fits. We have to assume our device is internet connected, but it doesn't have a nice useful interface for our users to log in on. Or maybe there is a good interface, but we don't want the user to type a password into it. If we had a video game system, we might have a browser, but a controller is terrible for typing passwords. Or maybe we have a smart refrigerator, which has a reasonable touchscreen interface, but a very limited browser, not capable of handling redirects. Or alternatively, think of a kiosk at the airport, has a good browser, has a nice big…

Contents