RFC 8628 device authorization request. Returns a user_code and verification_uri that the user visits on another device to approve. Poll POST /oauth/token with grant_type urn:ietf:params:oauth:grant-type:device_code to retrieve the token.
EdDSA-signed JWT obtained via OAuth 2.1 client_credentials or CIBA