From the course: Web Security: OAuth and OpenID Connect
Unlock the full course today
Join today to access over 24,900 courses taught by industry experts.
When should you use this? - OAuth Tutorial
From the course: Web Security: OAuth and OpenID Connect
When should you use this?
- [Narrator] So now, when do we use the device authorization flow? If we go back to the decision tree from our grant type video, we end up on a different branch. First, we have a user involved, which also means we can use this grant type for OpenID Connect in addition to regular OAuth. Next, do we have a browser involved? No, and this is where the device grant type fits. We have to assume our device is internet connected, but it doesn't have a nice useful interface for our users to log in on. Or maybe there is a good interface, but we don't want the user to type a password into it. If we had a video game system, we might have a browser, but a controller is terrible for typing passwords. Or maybe we have a smart refrigerator, which has a reasonable touchscreen interface, but a very limited browser, not capable of handling redirects. Or alternatively, think of a kiosk at the airport, has a good browser, has a nice big…