Currently interactive auth results in this:
$ sign_blob README.md -o README.md.sigstore.json
Signing artifact: README.md
Size: 7571 bytes
Starting interactive authentication...
Please visit: https://oauth2.sigstore.dev/auth/device
Or open: https://oauth2.sigstore.dev/auth/device?user_code=ABCD-EFGH
Enter code: ABCD-EFGH
Waiting for authentication...
Would be nice to do a couple of things to smooth this experience:
- the local-redirect-server trick so we don't need to show the user the device code at all -- see sigstore-python or cosign for examples
- try to open a browser automatically. If browser open does not work, then print the URL