Closed sknebel closed 5 years ago
Client makes request, does not include callback id. Server responds with request_id that can be used to query? (do not reuse state from client, since that theoretically could be duplicated with another request?). poll responses similarly to device flow, including timeout and slow down responses.
An example for how to do this could be the Oauth 2.0 Device Flow (thanks @sebsel for the pointer to that)