Device sign-in tokens expire, and the approval page shows where the request came from issue #70 closed: completed andymccall opened this 1 month ago · 0 comments

Device sign-in issues tokens with no expiry. Give them a lifetime (90 days, extended while in use) and show it in Settings. The approval page shows the client, when the request was made and the requester's IP, and warns to approve only a code you just started.