Authorization flow initiation using short-term wireless communication

摘要

In general, aspects of the disclosure are directed towards techniques for initiating an authorization flow with a user to enable a user interface-limited client computing device to obtain access to protected resources hosted by a resource service. In some aspects, a computing device comprises at least one processor. The computing device also comprises a short-range wireless communication module operable by the at least one processor to receive, using short-range wireless communication, an authentication request from a client device. The computing device also comprises an authorization module operable by the at least one processor to receive authorization to provide at least one security credential to the client device, wherein the authorization module is further configured to, responsive to receiving the authorization, send an indication of the authorization to an authentication service.

主权项

1. A method comprising:
receiving, by a computing device from a client device and using short-range wireless communication, an authorization request for authorization to exchange information with a resource service that hosts a protected resource; receiving, at a presence-sensitive screen operably coupled to the computing device, authorization to provide at least one security credential to the client device; and responsive to receiving the authorization, sending, by the computing device and to an authorization service, an indication of the authorization to provide at least one security credential to the client device; outputting, by the computing device and for display at the presence-sensitive screen, a request for a resource owner credential; receiving, by the computing device at the presence-sensitive screen, the resource owner credential; and sending, by the computing device, the resource owner credential to the authorization service.