What is OAuth Device Flow — CLI Agent Login Checklist?

OAuth device flow checklist for CLI and agent login. Covers user codes, polling intervals, token storage, logs, and security boundaries.

Is OAuth Device Flow — CLI Agent Login Checklist free to use?

Yes. OAuth Device Flow — CLI Agent Login Checklist is freely available on TokRepo. Check the Source & Thanks section on the asset page for the specific open-source license.

How do I install OAuth Device Flow — CLI Agent Login Checklist?

Visit the asset page on TokRepo and click "Copy for agent" to get the installation instructions. Most assets can be installed with a single command.

OAuth Device Flow — CLI Agent Login Checklist

Implementation Checks

Verify these fields and behaviors:

Check	Expected behavior
`device_code`	Secret to the CLI, never shown to the user.
`user_code`	Short enough to type, expires quickly.
`verification_uri`	HTTPS page controlled by the auth provider.
`interval`	CLI respects polling interval and backs off on `slow_down`.
Expiry	CLI stops polling when `expires_in` is reached.
Storage	Token is stored with local file permissions or keychain support.

Security Boundaries

Do not log access tokens, refresh tokens, or device codes.
Do not store tokens in the repo.
Do not print full bearer headers in debug output.
Do not ask an LLM agent to operate the user's browser session unless the user explicitly authorizes it.
Prefer short-lived access tokens and rotate refresh tokens when supported.

Agent Review Prompt

Review this CLI OAuth device flow. Check polling interval handling, token storage,
error states, terminal output, and whether any secret can appear in logs,
shell history, repository files, or agent transcripts.

OAuth Device Flow — CLI Agent Login Checklist

Este activo puede ser leído e instalado directamente por agents

Implementation Checks

Security Boundaries

Agent Review Prompt

Fuente y agradecimientos

Discusión

Activos relacionados

Zero-Downtime DB Migration — Expand Contract Checklist

Memorix — Cross-Agent Memory Control Plane

Ogham MCP — Shared Persistent Agent Memory

Awesome Agent Memory — Long-Term Context Index