v1

latestSwagger 2.02026-07-143921.2 KB

authorization

Initiate an OAuth2 login flow for limited input devices

This flow should only be used by clients who cannot show a native webview or do not have advanced input controls. It is an alternative to GET /v2/authorize.

Third-party clients will need to use one or the other of these two endpoints, but they will generally not use both.

post/v2/device

Response

We have generated a unique device code and user code. These will only be valid for the amount of time specified in the expires_in field; if the user does not complete the login process in that amount of time, the client will need to request a new set of codes.

device_codestring required

40-character code for the device to input into the /token endpoint, not for display to the user

expires_ininteger required

The number of seconds for which this set of codes will be valid, after which they will be purged

intervalinteger required

The number of seconds the client application should maintain between requests to the /token endpoint

user_codestring required

6-character alphanumeric code for the user to enter at http://npr.org/device, to be displayed by the client application

verification_uristring required

The URL where the user should input their code, to be displayed by the client application

All 3 operations