qr login like in steam/discord?

[marknefedov]

Hi can you provide some guidance what parts of the api is better to use to recreate a QR login, via device with existing session?

[vinckr]

Hello @marknefedov
are you looking to authenticate devices that do not have a browser via a QR code or what is the use case exactly?

[marknefedov]

No, an easier way to sign in, if a use already has an authenticated device (e.g a smartphone) he can login on another device by scanning QR code, no need to login to password manager, share any login or password. I assume this is a variation of “device flow” you are referring to.

[vinckr]

Hey @marknefedov
I think you can do this via the passwordless code method.
The user will get a code that they can use to login on another device. You should also be able to embed this code into a QR code.

[marknefedov]

Hmm, it looks like it is not completely what I referring to.

The first step the user is required to enter their email address or phone number.

In the examples I provided QR allows to login in a single step, that is significant usability advantage. Especially in scenarios "I don't remember what exactly email I used and I don't want to look it up".

I thought this is a variant of oauth's Device Authorization Grant because it feels closets in user experience.