fix: replace device flow with loopback ip redirect flow (RFC 8252)

- Device Flow only works with 'TV and Limited Input devices' OAuth client type
- Desktop app type requires Authorization Code flow with localhost redirect
- New flow: start local TCP server on random port, open browser with auth URL,
  catch redirect containing authorization code, exchange for tokens
- Uses webbrowser crate to auto-open the browser
- Self-contained: no separate HTTP server framework needed, uses std::net
- Popup shows auth URL and waits for browser authorization
- Support for refresh_token for long-lived access

This commit is contained in:

Ruben Rosario

2026-06-20 20:55:08 +01:00

parent 64993b127c

commit 0cbf9262c7

5 changed files with 471 additions and 173 deletions

									
										Cargo.toml
									
		+1
		
												View File
												
				@@ -14,3 +14,4 @@ serde_json = "1"

				chrono = { version = "0.4", features = ["serde"] }

				dirs = "6"

				url = "2"

				webbrowser = "1"