[mitreid-connect] MITREid Connect Webapp and devices with limited input capabilities

[István Koren]

Dear MITREid team! :)

We are using the MITREid OpenID Connect Server Webapp in a big European
research project. So far it has been awesome, thanks!

Today I developed a Google Glass app that accesses some protected resource
with an access_token. As typing in a password is not an option (neither is
dictating it...) I went through scanning a QR code containing the
access_token. Works great, but obviously this is not a great solution. Here
is how Google is supporting such devices:
https://developers.google.com/accounts/docs/OAuth2ForDevices
Basically you get a URL and a small code that the user types in in a
browser, while the device polls the server until the user is authenticated.
I tried adopting the /device/code URL for our MITREid instance but it didn't
work and I also didn't find any documentation on this. Is this feature on
your roadmap? Otherwise we'll go with a custom solution or even try to add
it somehow.

Cheers,
 István

---
Dipl.-Medieninf. István Koren
Advanced Community Information Systems (ACIS) 
Informatik 5, RWTH Aachen University, Germany
http://dbis.rwth-aachen.de/cms/staff/koren