This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim opens the phishing link and instantly redirects them to the authentication page. No authentication method, not even FIDO, is able to protect against this type of attack.
Code demo repo for my Beyond Passwords talk
FusionAuth Kickstart example.
Desktop-grade web GUI for kino.pub — browse the full catalog, preview titles in a built-in player, and download full-fidelity video (every audio track & subtitle, whole series) with live progress. Official kino.pub API; single Go binary with an embedded React UI.
PoC: Auth Code + PKCE and Device Code flows replacing ROPC (companion to blog post)
Pi extension that adds ChatGPT Plus/Pro device-code login for OpenAI Codex
Add a description, image, and links to the device-code topic page so that developers can more easily learn about it.
To associate your repository with the device-code topic, visit your repo's landing page and select "manage topics."