{
  "node_id": "ietf-rfc-8628-device-authorization-grant-2019",
  "title": "IETF RFC 8628 - OAuth 2.0 Device Authorization Grant: Browserless and Input-Constrained Device Authentication",
  "domain": "Workflow Automation",
  "version": "1.0.0",
  "last_updated": "2026-05-09",
  "bluf": "RFC 8628 (August 2019) defines the OAuth 2.0 Device Authorization Grant (formerly Device Flow) enabling devices with limited input capabilities (CLI tools, IoT devices, smart TVs, AI agents without browser access) to obtain OAuth tokens…",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "iso_standard",
      "industry_mapping",
      "regulatory_mapping"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "ietf-oauth-2-1-authorization-framework",
    "ietf-rfc-7519-json-web-token-jwt"
  ],
  "primary_citations_count": 7,
  "workflow_steps_count": 9,
  "schema_fields_count": 17,
  "citation_preview": [
    {
      "source": "IETF RFC 8628 - OAuth 2.0 Device Authorization Grant (August 2019)",
      "url": "https://www.rfc-editor.org/rfc/rfc8628",
      "section": "Sections 1-6 - complete specification including device authorization request, user interaction requirements, token polling, error handling, and security considerations"
    },
    {
      "source": "RFC 8628 Section 3.1 - Device Authorization Request",
      "url": "https://www.rfc-editor.org/rfc/rfc8628#section-3.1",
      "section": "Section 3.1 - request parameters and response fields; Section 3.3 - user interaction requirements; Section 3.4 - device access token request and polling error codes"
    }
  ]
}