Add device authorization grant (device code flow - rfc 8628)#1539

Merged

dopry merged 42 commits intodjango-oauth:masterfrom

duzumaki:add-device-flow

Nov 9, 2025

Commits on Nov 8, 2025

Add Device model

duzumaki
authored and
dopry
committed
Adhere content-type request header to CGI standard

duzumaki
authored and
dopry
committed
Add create device authorization response method

duzumaki
authored and
dopry
committed
Update the grant type mapping to recognize device code

duzumaki
authored and
dopry
committed
Devices that are public should not need basic auth

duzumaki
authored and
dopry
committed
Add device settings

duzumaki
authored and
dopry
committed
Create device authorization view

duzumaki
authored and
dopry
committed
Ensure we import in the views module

duzumaki
authored and
dopry
committed
Migrations

duzumaki
authored and
dopry
committed
Add initial stage test

duzumaki
authored and
dopry
committed
Temp commit: Point oauthlib to master

duzumaki
authored and
dopry
committed
Add device poll change test

duzumaki
authored and
dopry
committed
Add incorrect client id test

duzumaki
authored and
dopry
committed
Update authors and changelog

duzumaki
authored and
dopry
committed
Add the device user code form

duzumaki
authored and
dopry
committed
Add approve deny form

duzumaki
authored and
dopry
committed
Update request body validator

duzumaki
authored and
dopry
committed
Update device imports

duzumaki
authored and
dopry
committed
Update token endpoint

duzumaki
authored and
dopry
committed
Prep the tests: Create user_code_generator util

duzumaki
authored and
dopry
committed
Add user code generator to main settings

duzumaki
authored and
dopry
committed
Add tests to test the whole flow

duzumaki
authored and
dopry
committed
Update idp requirements

duzumaki
authored and
dopry
committed
Add tutotial doc

duzumaki
authored and
dopry
committed
Update idp requirements

duzumaki
authored and
dopry
committed
Ensure the django user sets the oauthlib request user

duzumaki
authored and
dopry
committed
Ensure device token errors are returning 400

duzumaki
authored and
dopry
committed
Add device code to refresh token mapping

duzumaki
authored and
dopry
committed
chore: address documentation notes
dopry
committed
chore: add more details to the tutorial docs

cristiprg
authored and
dopry
committed
fix: addressed comments; enhanced preconditions and responses of views

cristiprg
authored and
dopry
committed
Use term DeviceGrant over Device

cristiprg
authored and
dopry
committed
test: add missing unit test for user_code_generator

cristiprg
authored and
dopry
committed
Use latest oauthlib 3.3.0

cristiprg
authored and
dopry
committed
Use class based views to make them more easily extensible

cristiprg
authored and
dopry
committed
Bugfix: handle missing client_id

cristiprg
authored and
dopry
committed
Increase test coverage

cristiprg
authored and
dopry
committed
Add missing test case in the validor class

cristiprg
authored and
dopry
committed
Remove serialisation methods of DeviceGrant class

cristiprg
authored and
dopry
committed
Add tests that cover DeviceConfirmView for various values for action

cristiprg
authored and
dopry
committed
Add instructions in the test IDP for device authorization flow

cristiprg
authored and
dopry
committed

Commits on Nov 9, 2025

chore: add a device code demo to the tests/app/RP
dopry
committed