Krishna Dey Shipped · Core product systems
OAuth 2.0 Device Authorization Grant
Researched and implemented the OAuth 2.0 Device Authorization Grant (RFC 8628) as reusable authentication infrastructure, built for the Gmail integration but designed to back "Login with SpotDraft" from any constrained or limited-input client.
Software Engineer
Shipped.
Gmail frontend integration built by another engineer; this covers the backend device-authorization capability behind it.
Challenge
SpotDraft needed secure authentication for external clients where a conventional embedded web login was not a good fit, starting with the Gmail integration, without hard-coding a Gmail-specific auth path.
Approach
I researched RFC 8628 and proposed the Device Authorization Grant as the right model, then implemented the internal device-authorization endpoints and use cases: device and user code issuance, a separate-browser verification step, and client polling that handled authorization-pending, slow-down, denial, and expiry states before issuing tokens.
Outcome
The flow shipped as the backend behind SpotDraft's Gmail login experience (the Gmail frontend itself was built by another engineer) and as reusable authentication infrastructure other constrained clients could adopt without rebuilding the flow.
What it taught
Building the standard protocol instead of a Gmail-specific shortcut meant the same authentication path could be reused the next time a constrained client needed it, instead of becoming one-off integration debt.
More projects
All projectsReplaced SpotDraft's fixed two-party contract assumption with configurable party roles, so contract creation, questionnaires, and publishing could support more than one organization or individual on either side of an agreement.
A configurable reverse-sync system for pushing contract and workflow data back into Salesforce, shaped to be extensible across triggers, conditions, object mappings, and future automation use cases.
Structured legal-request intake, first explored as a 2024 internal hackathon project with Sanket Mishra and Punit Batra, then built out through 2025 as a cross-functional squad I led, and shipped to production in January 2026 as the 'front desk of Legal' inside SpotDraft.