!!! Overview
[{$pagename}] is defined (As far as we know) only in [OAuth 2.0 Device Profile draft-recordon-oauth-v2-device-00|https://tools.ietf.org/html/draft-recordon-oauth-v2-device-00|target='_blank'].

The [{$pagename}] is suitable for [clients|OAuth Client] executing on devices which do not have an easy data-entry method (e.g. game consoles or media hubs), but where the end-user has separate access to a [user-agent] on another computer or device (e.g. home computer, a laptop, or a smart phone).  The [clients|OAuth Client] is incapable of receiving incoming requests from the [Authorization Server] (incapable of acting as an HTTP server).


%%warning
[{$pagename}] was replaced by [OAuth 2.0 Device Authorization Grant]
%%


Instead of interacting with the end-user's [user-agent], the [clients|OAuth Client] instructs the end-user to use another computer or device and connect to the [Authorization Server] to approve the access request.  Since the [clients|OAuth Client] cannot receive incoming requests, it polls the [Authorization Server] repeatedly until the end-user completes the approval process.

The [{$pagename}] does not utilize the [client Secret] since the client executables reside on a local device which makes the [client Secret] accessible and exploitable.

!! [Chromecast|https://www.google.com/intl/en/chromecast/|target='_blank'] and [OAuth 2.0][1]
It appears [Chromecast|https://www.google.com/intl/en/chromecast/|target='_blank'] makes use of [{$pagename}]


[{Image src='OAuth 2.0 Device Profile/Who-Am-I-sequence-full.png' caption='OAuth 2.0 Device Profile' align=left}]. \\



!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [“Who Am I” in the Internet of Things?|https://cardinalpeak.com/blog/who-am-i-in-the-iot/|target='_blank'] - based on information obtained 2015-11-06