anxdpanic
Using Device Grant Flow
What Problem Does This Solve?
I see several issues with the current authentication flow: Currently, as far as I can see it, the user has to verify by typing an url manually into another device, then typing the code back into kodi, where it is stored in plain sight, potentially open to other users of the same device. Changing the oauth token is just as tedious, as you would need to re-enter the token every time you change the user.
Suggest a Solution (optional)
Since I stumpled upon some new code based login flow in another tool recently, I looked it up, and found that Twitch now offers a Device Code Grant Flow https://dev.twitch.tv/docs/authentication/getting-tokens-oauth/#device-code-grant-flow . I believe this would make the login much easier and safer for the user.
