Device Authentication for the API

[robotman321]

The objective is to provide a 6 digit hexadecimal code when requested by allowable devices. Users will then take the code seen on their TV/Device screen and input it on the site.

Items Needed:

• device table to handle requests, markers for the status of the request (pending, accepted)
• new column in developers_api_sessions to handle mapping to the device table, NULL by default, then the ID of the device. This will be shown in the sessions listing when the device has been accepted.
• User web interface at animeftw.tv/connect which allows the user to put in the 6 digit code, have client side validation that makes AJAX requests to validate the code before submitting. When submission has completed, let them know to check their device.
• New API requests, action=activate-device, action=device-generate-key.. Both would be pre-login facing and would be protected by a new bit on the developers table so that keys without that option get denied messages.
• New developers table column "codeauth", which will be used to ensure not all keys can use device authentication.

[robotman321]

devices table:

CREATE TABLE IF NOT EXISTS `developers_devices` (
  `id` int(15) NOT NULL,
  `key` varchar(6) NOT NULL,
  `date` int(11) NOT NULL,
  `uid` int(11) NOT NULL,
  `did` int(11) NOT NULL,
  `status` int(1) DEFAULT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

developers_api_sessions column update:

ALTER TABLE `developers_api_sessions` ADD `device` INT(15) NULL DEFAULT NULL ;

developers update for device auth:

ALTER TABLE `developers` ADD `deviceauth` INT(1) NOT NULL DEFAULT '0' ;