Idea: Login for TV apps (OAuth 2.0 Device Authorization Grant)

[fungc-io]

Problem

Enables devices with no browser or limited input capability to obtain an access token. This is commonly seen on Apple TV apps, or devices like hardware encoders that can stream video to a YouTube channel.

Appetite

6 weeks

Solution

The OAuth 2.0 Device Authorization Grant specification is designed for that: https://datatracker.ietf.org/doc/html/rfc8628

• The device (client) request login from Authgear
• Authgear returns the code and URI and the device presents them to the end-user, preferably in QR code format
• The end user scan the QR code and open the AuthUI in browser
• Complete the authentication flow in browser
• Sees the device logged in. It obtains the access token and refresh token.

[fungc-io]

@louischan-oursky please also share the related resources you saw in this pitch~

[louischan-oursky]

https://openid.net/specs/openid-client-initiated-backchannel-authentication-core-1_0.html