This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 28 lines
!!! Overview
[{$pagename}] is defined (As far as we know) only in [OAuth 2.0 Device Profile draft-recordon-oauth-v2-device-00|https://tools.ietf.org/html/draft-recordon-oauth-v2-device-00|target='_blank'].
The [{$pagename}] is suitable for [clients|OAuth Client] executing on devices which do not have an easy data-entry method (e.g. game consoles or media hubs), but where the end-user has separate access to a [user-agent] on another computer or device (e.g. home computer, a laptop, or a smart phone). The [clients|OAuth Client] is incapable of receiving incoming requests from the [Authorization Server] (incapable of acting as an HTTP server).
%%warning
[{$pagename}] was replaced by [OAuth 2.0 Device Authorization Grant]
%%
Instead of interacting with the end-user's [user-agent], the [clients|OAuth Client] instructs the end-user to use another computer or device and connect to the [Authorization Server] to approve the access request. Since the [clients|OAuth Client] cannot receive incoming requests, it polls the [Authorization Server] repeatedly until the end-user completes the approval process.
The [{$pagename}] does not utilize the [client Secret] since the client executables reside on a local device which makes the [client Secret] accessible and exploitable.
!! [Chromecast|https://www.google.com/intl/en/chromecast/|target='_blank'] and [OAuth 2.0][1]
It appears [Chromecast|https://www.google.com/intl/en/chromecast/|target='_blank'] makes use of [{$pagename}]
[{Image src='OAuth 2.0 Device Profile/Who-Am-I-sequence-full.png' caption='OAuth 2.0 Device Profile' align=left}]. \\
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [“Who Am I” in the Internet of Things?|https://cardinalpeak.com/blog/who-am-i-in-the-iot/|target='_blank'] - based on information obtained 2015-11-06