Skip to content

Device code flow can complete before the user submits the TTL form #136

@tyler0852

Description

@tyler0852

In the current device code flow, a user can call the tokens endpoint after submitting their user code but before entering a TTL and still receive an access token. If they then try to submit the TTL form, they are unable to complete that step because the device code has already been consumed.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions