Identityserver4: Add OAuth 2.0 Device Flow

[leastprivilege]

https://tools.ietf.org/wg/oauth/draft-ietf-oauth-device-flow/

[ploegert]

I see above that device-flow from the 2.0 & 2.1 road-map. Will this be something that will be visiting in re-prioritizing at some point, or is this flow not planned on being supported anywhere in the near term?

[leastprivilege]

Absolutely - as soon as the spec is done we will put it on our schedule.

[leastprivilege]

If you need it earlier (based on a pre-release version of the spec) - we would need to talk about sponsoring.

[brockallen]

Absolutely - as soon as the spec is done we will put it on our schedule.

But if our timeline for adding it isn't soon enough for you, then that would also be a situation for sponsoring to accelerate the feature.

[leastprivilege]

From OAuth WG:

A related question: the last call made me wonder if there are any plans to add a device flow for OpenID Connect. Does anyone know if such a thing is in the works?

The Google implementation of the device flow already supports OpenID Connect. Just add "openid" to the scopes in the request as you normally would, and you'll get an ID Token on the response.

[scottbrady91]

FYI: https://github.com/scottbrady91/IdentityServer4/tree/device-flow

[leastprivilege]

We decided to start the work on that. If we manage to implement this without breaking changes, the current plan is to include that in 2.3

[leastprivilege]

work continues on PR - closing the issue.

[lock[bot]]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.