Authentication
Pick the flow that fits where your app runs.
- Browser, phone or desktop
- OAuth. put.io asks the person to approve your app.
- TV, console, streaming box
Device link. The person types a short code at put.io/link.
- Your own scripts
- A personal token from your account settings.
OAuth
Register your app on the OAuth Apps page and set its callback URL. Send people to /v2/oauth2/authenticate.
- Your server
response_type=code. put.io redirects back with a code; your server exchanges it for a token with the client secret.- Apps people install
response_type=token. put.io redirects back with the token itself, so the app ships no secret.
Client secrets in installed apps will stop working
We will post the dates here first.
Device link
curl "https://api.put.io/v2/oauth2/oob/code?app_id=$APP_ID" { "code": "QWERTY" } curl https://api.put.io/v2/oauth2/oob/code/QWERTY { "oauth_token": "…" }
Show the code. Poll the second call until it returns a token.