Establish access to a service using machine-readable code

1. An apparatus comprising:

a processor; and

a memory on which is stored machine readable instructions that cause the processor to:

receive a request from a first device for an authentication token for access to a service;

determine whether the first device is authorized to receive the authentication token for access to the service;

based on a determination that the first device is authorized to receive the authentication token for access to the service, generate a machine-readable code including the authentication token that a second device is to use for access to the service by the second device; and

send the generated machine-readable code to the first device, the first device to display the machine-readable code, wherein the second device is to use a captured image of the machine-readable code to establish an authenticated session to the service on the second device.

2. The apparatus of claim 1 , wherein the instructions cause the processor to:

based on a determination that the first device is not authorized to receive the authentication token, not generate the machine-readable code.

3. The apparatus of claim 1 , wherein the instructions cause the processor to:

identify a credential associated with the first device;

determine whether the credential is authentic; and

based on a determination that the credential is authentic, determine that the first device is authorized to receive the authentication token.

4. The apparatus of claim 1 , wherein the instructions cause the processor to:

determine whether the first device has a currently active authenticated session to the service; and

based on a determination that the first device has a currently active authenticated session to the service, determine that the first device is authorized to receive the authentication token.

5. The apparatus of claim 1 , wherein the instructions cause the processor to:

generate the machine-readable code as visually displayable code.

6. The apparatus of claim 1 , wherein the instructions cause the processor to:

receive a second authentication token from the second device;

determine whether the second authentication token is authentic; and

based on a determination that the second authentication token is authentic, permit the second device to establish an authenticated session to the service.

7. The apparatus of claim 6 , wherein the instructions cause the processor to:

based on a determination that the second authentication token is not authentic, prevent the second device from establishing an authenticated session to the service.

8. The apparatus of claim 6 , wherein the instructions cause the processor to:

determine whether the second authentication token matches the authentication token included in the machine-readable code sent to the first device; and

determine that the second authentication token is authentic based on a determination that the second authentication token matches the authentication token.

9. The apparatus of claim 1 , wherein the instructions cause the processor to:

include an authentication session identifier in the machine-readable code.

10. A method comprising:

receiving, by a processor, a request from a first device for a visually displayable machine-readable code including an authentication token for access by a second device to a service;

determining, by the processor, whether the request is to be fulfilled;

based on a determination that the request is to be fulfilled, generating, by the processor, the visually displayable machine-readable code including the authentication token; and

sending, by the processor, the generated visually displayable machine-readable code to the first device, wherein the first device is to display the visually displayable machine-readable code and a second device is to capture an image of and use the captured image of the visually displayable machine-readable code displayed by the first device to automatically establish an authenticated session to the service on the second device.

11. The method of claim 10 , further comprising:

identifying a credential associated with the first device;

determining whether the credential is authentic; and

based on a determination that the credential is authentic, determining that the request is to be fulfilled.

12. The method of claim 10 , further comprising:

determining whether the first device has a currently active authenticated session to the service; and

based on a determination that the first device has a currently active authenticated session to the service, determining that the request is to be fulfilled.

13. The method of claim 10 , further comprising:

receiving a second authentication token from the second device;

determining whether the second authentication token matches the authentication token included in the machine-readable code sent to the first device; and

based on a determination that the second authentication token matches the authentication token, permitting the second device to establish an authenticated session to the service.

14. The method of claim 13 , further comprising:

based on a determination that the second authentication token does not match the authentication token, preventing the second device from establishing the authenticated session to the service.

15. The method of claim 10 , further comprising:

including an authentication session identifier in the visually displayable machine-readable code.

16. A computer-readable medium on which is stored computer-readable instructions that when executed by a processor, cause the processor to:

receive a request from a first device for a machine-readable code, the machine-readable code including an authentication token for use by a second device to access a service;

determine whether the first device has a currently active authenticated session to the service;

based on a determination that the first device has a currently active authenticated session to the service, generate the machine-readable code including the authentication token as a displayable code on the first device; and

send the generated machine-readable code to the first device, wherein the first device is to display the machine-readable code and a second device is to capture an image of and use the captured image of the machine-readable code displayed by the first device to establish an authenticated session to the service on the second device without submission of a credential from the second device separate from the authentication token in the machine-readable code.

17. The computer-readable medium of claim 16 , wherein the instructions are further to cause the processor to:

receive a second authentication token from the second device;

determine whether the second authentication token matches the authentication token included in the machine-readable code sent to the first device; and

based on a determination that the second authentication token matches the authentication token, permit the second device to establish an active authenticated session to the service.

18. The computer-readable medium of claim 17 , wherein the instructions are further to cause the processor to:

based on a determination that the second authentication token does not match the authentication token, prevent the second device from establishing an authenticated session to the service.

19. The computer-readable medium of claim 16 , wherein the instructions are further to cause the processor to:

generate the machine-readable code including the authentication token as a one of a displayable barcode or a quick response code.

20. The computer-readable medium of claim 16 , wherein the instructions are further to cause the processor to:

include an authentication session identifier of the currently active authenticated session of the first device in the machine-readable code.