pub async fn device_verification(
pool: Data<PgPool>,
query: Query<DeviceVerificationQuery>,
user: AuthUser,
) -> ControllerResult<HttpResponse>Expand description
Handles GET /device_verification — render data for the browser consent page.
Session-authed. Looks up the still-pending, unexpired grant for the given
user_code (normalizing the input first) and returns the client name and
requested scopes so the page can ask the user to approve. A code that is
unknown, expired, or no longer pending yields 404 Not Found so the page can
show a distinguishable “invalid or expired code” message.