https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41671 --- Comment #4 from David Cook <dcook@prosentient.com.au> --- I've been thinking more about this lately, and I suppose this would work best with third-party (discovery) systems (like Aspen/VuFind) where people are using their own devices to do logons. For public devices like kiosks... it can be more complicated. If they have a keyboard, then it's OK, but there are scenarios where you might not have a keyboard. You might just be scanning your barcode. I suppose that's where we run into either the Device Authorization grant or Token Exchange. -- I'm hoping to wrap up the XOAUTH2 work soon and then probably switch to this. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.