Support OIDC / OAuth 2.0 device authorization grant

[yee379]

Is your feature request related to a problem? Please describe.

given vault can now support acting as a oidc idp, implementing the oidc device flow spec (RFC 8628) would be very useful! in particular for myself, being able to allow ssh logins with vault (and not using ssh keys).

[austingebauer]

Thanks for this feature request, @yee379!

[ClientIco]

When can we expect this to be part of Hashi Vault ? Please give a possible ETA!

[ClientIco]

What can be used in the mean time ? Is there a community plugin for Device Flow that ain't part of the binary we can use until this is added ?

[ClientIco]

I found this as a reference to a plugin

hashicorp/vault-plugin-auth-jwt#103

hashicorp/vault-plugin-auth-jwt#131

[mwxp06]

It would be really nice to have possibility to use OAuth2.0, because now I can not use login via Vault (as provider) to Graphana :(