FeatureFuel
6

[Feature Request] App Authentication Flow for Mobile/Desktop Apps (Login Flow v2)

Source: paperless-ngx/paperless-ngx#11669 · opened by @ternes3
Description Primary idea: Enable mobile and desktop apps to securely obtain API tokens through a browser-based authentication flow - similar to [Nextcloud's Login Flow v2]( Currently, third-party apps like [PaperNext]( need users to manually create and copy API tokens when using SSO/OIDC. First idea: Login Flow v2 (Nextcloud-inspired) I propose implementing an app authentication flow inspired by Nextcloud's proven approach: API Endpoints | Endpoint | Method | Description | |----------|--------|-------------| | /api/app_auth/start/ | POST | Start auth flow, returns poll_token and login_url | | /api/app_auth/authorize/ | GET | Browser endpoint where user authenticates | | /api/app_auth/poll/ | POST | App polls with poll_token until auth completes | Why? First thoughts: Traditional OAuth requires server administrators to register each client application with a client_id and client_secret. How would a server admin get their OAuth credentials into …

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests