Method device_flow_token_response

examples/device_code_flow.py:225–252

Following the rfc, this will route the device request accordingly and raise required errors. Remember that unlike other auth flows, the device if polling this endpoint once every "interval" amount of seconds.

(self, request, device_code)

    @rate_limit  # this will raise the SlowDownError
    def device_flow_token_response(self, request, device_code):
        """
        Following the rfc, this will route the device request accordingly and raise
        required errors.

        Remember that unlike other auth flows, the device if polling this endpoint once
        every "interval" amount of seconds.
        """
        # using device_code arg to retrieve the correct device object instance
        device = Device

        if device.status == device.DeviceFlowStatus.AUTHORIZATION_PENDING:
            raise AuthorizationPendingError()

        # If user clicked "deny" in the /approve-deny page endpoint.
        # the device gets set to 'authorized' in /approve-deny and /device checks
        # if someone tries to input a code for a user code that's already been authorized
        if device.status == device.DeviceFlowStatus.DENIED:
            raise AccessDenied()

        url, headers, body, status = self.server.create_token_response(request)

        access_token = json.loads(body).get("access_token")

        device.status = device.EXPIRED

        # return access_token in a http response
        return access_token

    # Example of how token endpoint could handle the token creation depending on
    # the grant type during a POST to /token.