---
descriptions:
  cli_auth:
    device_code: >-
      A unique identifier for the authorization request used when polling the
      token endpoint.
    user_code: 'A short, user-friendly code that users enter to authorize the device.'
    verification_uri: The URL where users can enter the user code to authorize the device.
    verification_uri_complete: A URL with the user code pre-filled for one-click authorization.
originalPath: .tmp-workos-clone/packages/docs/content/reference/authkit/cli-auth/index.mdx
---

# CLI Auth

CLI Auth enables command-line applications to authenticate users through the web using the [OAuth 2.0 Device Authorization Flow](https://datatracker.ietf.org/doc/html/rfc8628).

The CLI Auth flow involves two main endpoints:

1. The **device authorization URL** initiates the flow by obtaining a device code, user code, and verification URIs.
2. The **device access token URL** is where the device exchanges the device code for access and refresh tokens after the user authenticates.

Read more about [CLI Auth here](/authkit/cli-auth).