Type Alias BrowserLoginOptions

Deployment type to authenticate against. Required — unlike getTokens(), there is no AM session yet at the start of a browser login for determineDeploymentType() to probe with, so it can't be auto-detected.

Override the built-in OAuth2 client id for the target deployment type.

Full, absolute redirect URI to use for browser login, for a client registered with an exact-match redirect URI. Shared with the non-interactive synthetic login flow's own --login-redirect-uri (see state.getAdminClientRedirectUri()) — when omitted here, that value is used as the fallback, exactly like loginClientId already falls back to state.getAdminClientId(). When both are absent, falls through to an auto-generated loopback redirect on an OS-assigned ephemeral port (or, for cloud's built-in client specifically, its one confirmed-fixed redirect URI — see CLOUD_BROWSER_LOGIN_REDIRECT_URI).

Override the default scope requested for the target deployment type.

Presents the login step (a URL, or a device code) to the human completing it.

How long to wait for the human to complete the login step.

Use the OAuth2 Device Authorization Grant instead of a loopback redirect.