# Device Authorization

The Quickback CLI uses the [OAuth 2.0 Device Authorization Grant](https://datatracker.ietf.org/doc/html/rfc8628) (RFC 8628) for authentication in headless environments.

## Flow

1. CLI requests a device code from the API
2. User sees a code in the terminal (e.g., `AUL8-H93S`)
3. User visits the approval URL and enters the code
4. CLI polls for approval and exchanges for a session token

This flow works in SSH sessions, containers, and WSL where browser redirects aren't possible.

See [CLI Reference](/tooling/cli#login) for usage details.