Watch on this TV

The set only holds a session_id. The partner talks to LoginRadius. Open the session inspector to see every API call BBC would make.

1. Register this TV

2. Add a BBC account

Partner starts device-code. You complete it on a phone. This TV only shows the user code.

3. Home

4. Settings

Profiles are a side channel (AssociatedDevices). Switching changes X-BBC-User-ID only. The device AT stays put. Stolen-TV revoke kills the session; mapping rows stay until you unlink.

5. Associated users

CIAM consent store for this husk. Partner calls GET /internal/bbc/sessions/:id/associations, which reads GET /api/oidc/{app}/associations.