51°F

Aaron Parecki

  • Articles
  • Notes
  • Photos
  • Anders Pitman https://twitter.com/anderspitman   •   Feb 18
    After a bit more research, looks like urn:ietf:wg:oauth:2.0:oob might be a more idiomatic (and probably more secure) approach?
    Aaron Parecki
    I'd recommend the device flow for it tbh, I've seen it used that way a bunch. The oob thing is more for installed apps that can monitor the address bar. With a command line app, especially over ssh, that doesn't really work.
    Portland, Oregon, USA • 43°F
    Fri, Feb 18, 2022 9:44am -08:00
    1 like 1 reply
    • Anders Pitman
    • Anders Pitman twitter.com/anderspitman
      I've seen it used with manual copy/paste, for example by rclone when getting a Google Drive token. That would be the way I'd use it. But apparently it's also not standardized.
      Fri, Feb 18, 2022 11:33pm +00:00 (via brid.gy)
Posted in /replies using quill.p3k.io

Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video production and livestreaming. (detailed bio)

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Director of Identity Standards at Okta
  • IndieWebCamp Founder
  • OAuth WG Editor
  • OpenID Board Member

  • 🎥 YouTube Tutorials and Reviews
  • 🏠 We're building a triplex!
  • ⭐️ Life Stack
  • ⚙️ Home Automation
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Trips
  • Videos
  • Contact
© 1999-2025 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons
WeChat ID
aaronpk_tv