Device authorization (RFC 8628)
POST /api/protocol/v1/auth/device
POST
/api/protocol/v1/auth/device
{ client_id, scope } → { device_code, user_code, verification_uri, verification_uri_complete, expires_in, interval }. The user approves at /activate; poll /auth/token with grant_type=urn:ietf:params:oauth:grant-type:device_code.
Request Body required
Section titled “Request Body required ”object
client_id
required
string
scope
required
string
Responses
Section titled “ Responses ”Device challenge
invalid_request / invalid_scope / invalid_grant
object
error
required
Stable machine-readable code (snake_case) or a short reason.
string
message
string
key
additional properties
any
Origin not allowed
object
error
required
Stable machine-readable code (snake_case) or a short reason.
string
message
string
key
additional properties
any
Rate_limited
object
error
required
Stable machine-readable code (snake_case) or a short reason.
string
message
string
key
additional properties
any