My system is set up as a kiosk and I want users to authenticate using social login like Gmail. However, since the kiosk has no keyboard, signing in can be tricky.
I'm wondering if it's possible for another device, such as a smartphone, to sign in and transfer the credentials (tokens, not passwords) to the kiosk (assuming there is some way to link the two devices, like a QR code).
This setup would be similar to how I can sign into Spotify on my Echo using my phone.
Do credentials get passed to the device or does the server gain access to my account and act on behalf of the device?
I'm really interested in understanding the correct way to handle this type of authentication process.