From the course: Web Security: OAuth and OpenID Connect (2019)

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

When should I use this?

When should I use this?

From the course: Web Security: OAuth and OpenID Connect (2019)

Start my 1-month free trial

When should I use this?

- [Instructor] As one of the newest grant types, the device grant type is probably one of the least understood. Despite the name device, this is never used for mobile devices, for that we want to use authorization code with Pixxy. Also this isn't for the vast majority of internet of thing or IOT devices. For that we want to use, well there's not a good answer for that one yet. You can only use the device grant type if you meet these four requirements and these are directly from the specification so they're non-negotiable. First, the device itself must already be connected to the internet. Second, the device must be able to make outbound, https requests. Third, the device must be able to communicate a URI to the end user for their authentication and eventual authorization. Finally, the user has to have a device available to use the URI. Now if you think back to my examples, obviously you wouldn't use this on a mobile…

Contents