Excellent timing, today's blog post on the @oktadev blog is ... • Aaron Parecki

65°F

https://mobile.twitter.com/tqbf/status/1513642858066161672

Excellent timing, today's blog post on the @oktadev blog is about exactly that! https://developer.okta.com/blog/2022/04/11/java-cli-device-grant (it applies to anything outside Okta too of course)

Portland, Oregon • 41°F

Mon, Apr 11, 2022 3:24pm -07:00

4 replies
Have you written a response to this? Let me know the URL:
- Aaron Parecki twitter.com/aaronpk
  
  Yep, that's the OAuth device flow! That's how I would expect to see it in most places now.
  
  Mon, Apr 11, 2022 10:46pm +00:00 (via brid.gy)
- dade twitter.com/0xdade
  
  AWS SSO opens a browser with the code embedded as a query param, then you login to your account, while the CLI is polling for changes from AWS to get a valid auth token after authn is done. I use `open <uri>` on macos for this.
  
  Mon, Apr 11, 2022 10:40pm +00:00 (via brid.gy)
- Aaron Parecki twitter.com/aaronpk
  
  Some do! But further down it says the CLI app can launch the browser on the machine if it has the ability to do so. Same flow under the hood tho. The other option is for the CLI app to spin up a web server on localhost to catch the redirect developer.okta.com/blog/2018/07/1…
  
  Mon, Apr 11, 2022 10:31pm +00:00 (via brid.gy)
- Thomas H. Ptacek twitter.com/tqbf
  
  “Open the browser and enter the following code” isn’t usually how these flows work.
  
  Mon, Apr 11, 2022 10:28pm +00:00 (via brid.gy)

Posted in /replies using quill.p3k.io