Skip to main content

DEVICE_VERIFICATION_PATH

Constant DEVICE_VERIFICATION_PATH 

Source
pub const DEVICE_VERIFICATION_PATH: &str = "login/device";
Expand description

The canonical page a user types their code into.

This constant is the phishing control (07-security.md, threat table): the tool prints this URL and never proxies, embeds, or imitates the approval page. Endpoints::verification_url derives from the configured web base so a test server can be pointed at, and device_flow::DeviceAuthorization::verification_uri is checked against it so a response that tries to send the user somewhere else is rejected rather than displayed.