Using QR code for mobile authorization of device oAuth2 on google apis

[Cecilia Abadie]

Hi All,

We implemented a solution that gets a user code on a device and requieres the device authentication from mobile.
At the moment we're displaying a QR code with the url for authentication, but we found no way to suggest the user_code pre-populated from the QR code to the mobile device.
We tried things like:
https://accounts.google.com/o/oauth2/device/usercode?user_code=3333333
but can't make it work.
It would really add a lot to the solution not to have to manually enter the code ...
Any suggestions?
Thanks,

C.

[Naveen Agarwal]

Hi Celilia,

We disabled the pre-populated user code entry due to possible security issues.
I'm assuming you would want to display the code to users in case they don't have a proper qr code reader handy?
What kind of device is it? What kind of scopes are being requested? We may be able to suggest something.

Thanks

Naveen

--
You received this message because you are subscribed to the Google Groups "oauth2-dev" group.
To view this discussion on the web visit https://groups.google.com/d/msg/oauth2-dev/-/CR-y8R2bZc4J.
To post to this group, send email to oauth...@googlegroups.com.
To unsubscribe from this group, send email to oauth2-dev+...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/oauth2-dev?hl=en.

[Cecilia Abadie]

Hi Naveen,

Yes, we display the code as a fail safe, but we'd love to be able to just have users scan and authorize.
The scope we're using is userinfo.profile. (mail, name and pic really)
We're hosting a golf simulator next week at Google IO. We'd like for users to walk into the simulator, click on the G+ button, scan the QR code and just hit authorize on their mobile phones. It would be a much better solution than having to actually manually input the code on their cell.
Any help would be greatly appreciated!
Thanks,

C.

To unsubscribe from this group, send email to oauth2-dev+unsubscribe@googlegroups.com.

[FSG Tour]

Hi Naveen,

Any chance to get a work around for the device authorization url to receive the code by parameter before Wed?
Thanks for all your help,

C.

To view this discussion on the web visit https://groups.google.com/d/msg/oauth2-dev/-/iBCBCZU1SRYJ.

To post to this group, send email to oauth...@googlegroups.com.

To unsubscribe from this group, send email to oauth2-dev+...@googlegroups.com.

[Arc Riley]

Unless I'm seriously misunderstanding something here, couldn't you point the QR code through a redirect URL?  This would also be much shorter, which means less complex QR code making it easier to scan.