Managing device authorization grant tokens after issuance?
❓Question✅Solved
I'm looking at adding similar functionality to our platform that is mentioned in multiple issues/posts so far, eg:
- https://github.com/zitadel/zitadel/issues/10915
- https://discord.com/channels/927474939156643850/927866013545025566/1414927372024807425
Having looked through the docs, issues, posts a fair bit, I've not come to any way to address what seems to me to be a massive gap. Once the tokens are issued to a device - how can I list those grants so I can manage them or revoke them?
The example listed here in the blog here https://zitadel.com/blog/device-authorization (admittedly, rather old now if the posting date is accurate), specifically mentions Netflix which has this functionality - listing authorized devices attached to an account/user.
I basically need that exact same functionality so the user can manage cli tools (ie: AI agents) or other integrations that wish to have API access to our platform.
Additionally, during the device authorization process, I'd like some way for the user to be able to select what access that particular device may have by selecting scopes, etc that subsequent requests can use to request access (ie: read-only, limited access, full access,etc).
Am I missing something here or is this all functionality that I would need to build from scratch?
- https://github.com/zitadel/zitadel/issues/10915
- https://discord.com/channels/927474939156643850/927866013545025566/1414927372024807425
Having looked through the docs, issues, posts a fair bit, I've not come to any way to address what seems to me to be a massive gap. Once the tokens are issued to a device - how can I list those grants so I can manage them or revoke them?
The example listed here in the blog here https://zitadel.com/blog/device-authorization (admittedly, rather old now if the posting date is accurate), specifically mentions Netflix which has this functionality - listing authorized devices attached to an account/user.
I basically need that exact same functionality so the user can manage cli tools (ie: AI agents) or other integrations that wish to have API access to our platform.
Additionally, during the device authorization process, I'd like some way for the user to be able to select what access that particular device may have by selecting scopes, etc that subsequent requests can use to request access (ie: read-only, limited access, full access,etc).
Am I missing something here or is this all functionality that I would need to build from scratch?
