Subscribe to more awesome content!

Device Flow for Input Constrained Devices

Try Auth0 For Free

Introducing Device Flow

Device Flow is an OAuth 2.0 authorization flow designed for browserless devices or devices with limited input capabilities. Device Flow enables end-users to authorize such devices to access APIs provided the devices have an internet connection.

Authenticate into your Smart TV Apps without compromising UX or security

Picture yourself sitting in front of your Smart TV and trying to login into your favorite streaming app. A typical consumer would use a handheld remote and the onscreen keyboard to enter their credentials which could be an extremely frustrating experience! The OAuth 2.0 device flow eliminates the need to enter user credentials directly on the Smart TV (in this case) and delivers an easier way for signing into apps or services on limited input devices with a simple 2 step process.

Step 1: Get the URL and code from the smart TV app. This can be achieved with a couple of clicks of the remote control.

Step 2: Use your secondary device such as a laptop or phone to complete the authentication process on a browser.

In the example below, we are showing how you can login to your Amazon Prime account using this 2-step process.

Device Flow Playground

Thinking about how to get started with Device Flow? Auth0 has setup a dev playground with a simulated smart TV for testing out device flow on your end. Get going today!

Going Beyond Smart TVs

Device flow delivers a great solution for the media streaming app use case (Smart TV apps specifically) but what about consumer IoT devices or sensor hubs that do not have a display? Constrained IoT Devices can possibly work with device flow as long as they are connected via a network to a smart controller/hub that has a display which can present the authorization code and URL to the user.