From df4d5e3f44fedf4abe5cea8cf7568816e1d98cfe Mon Sep 17 00:00:00 2001 From: max furman Date: Fri, 24 Jun 2022 16:26:01 -0700 Subject: [PATCH] Update the changelog and the examples in step oauth --- CHANGELOG.md | 5 ++--- command/oauth/cmd.go | 9 +++++++-- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 9cb8d6cc..5f7ba1cf 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -20,9 +20,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. ## [Unreleased] ### Added - Device Authorization Grant flow for input constrained devices needing OAuth -credentials from a non-Google OIDC provider. Users with Google providers can -force the Device Authorization Grant flow (rather than the default OOB flow) -by setting the environment variable `DEVICE=1`. +credentials. `--console-flow` flag in `step oauth` for selecting which +alternative OAuth flow to use. ### Fixed - Added back --domain and --remove-domain flags to provisioner CRUD diff --git a/command/oauth/cmd.go b/command/oauth/cmd.go index 1aa8a0d8..13c31cd2 100644 --- a/command/oauth/cmd.go +++ b/command/oauth/cmd.go @@ -149,12 +149,17 @@ $ step oauth --client-id my-client-id --client-secret my-client-secret \ Use the Device Authorization Grant flow for input constrained clients: ''' -$ step oauth --client-id my-client-id --client-secret my-client-secret --device +$ step oauth --client-id my-client-id --client-secret my-client-secret --console-flow device ''' Use the Out Of Band flow for input constrained clients: ''' -$ step oauth --client-id my-client-id --client-secret my-client-secret --oob +$ step oauth --client-id my-client-id --client-secret my-client-secret --console-flow oob +''' + +Use the default OAuth flow for input constrained clients: +''' +$ step oauth --client-id my-client-id --client-secret my-client-secret --console ''' Use additional authentication parameters: