---
title: "Device Authorize"
method: POST
path: "/oauth/device/authorize"
tags: ["Authentication"]
---

# Device Authorize

`POST /oauth/device/authorize`

## Request

- Base URL: `https://qveris.ai/api/v1`
- URL: `https://qveris.ai/api/v1/oauth/device/authorize`
- Auth: one of:
  - none
  - HTTP basic

## Response `200`

Successful Response

- OAuthDeviceAuthorizationResponse: RFC 8628 device authorization response.
  - `device_code` string, required: Secret code used only to poll the token endpoint.
  - `user_code` string, required: Short code displayed to and verified by the user.
  - `verification_uri` string, required: Browser URL where the user approves the request.
  - `verification_uri_complete` string, required: Verification URL with the user code prefilled.
  - `expires_in` integer, required: Device and user code lifetime in seconds.
  - `interval` integer, required: Minimum token polling interval in seconds.

## Other responses

- `400`: OAuth request or grant error
- `401`: Client authentication or bearer-token error
- `403`: Subject token has insufficient scope
- `422`: Validation Error
- `429`: Device Authorization rate limit exceeded

---

[API](https://skmtc.dev/qveris/apis/qveris-public-rest-api.md) · [All operations](https://skmtc.dev/qveris/apis/qveris-public-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/qveris/apis/qveris-public-rest-api/revisions/7b78aeef092a?raw)