02.06.2017 - I realize you said "not open a web browser", but what about if that browser is on another device (e.g. their mobile?). If that is acceptable, you can use the OAuth .