BBC iPlayer TV

This set never talks to LoginRadius. It only holds a session_id. Isolation inspector: http://127.0.0.1:4004

1. Register this TV

2. Add a BBC account

Partner starts device-code. You complete it on a phone. This TV only shows the user code.

3. Home

4. Settings

Profiles are a side channel (AssociatedDevices). Switching changes X-BBC-User-ID only. The device AT stays put. Stolen-TV revoke kills the session; mapping rows stay until you unlink.

5. Associated users

CIAM consent store for this husk. Partner calls GET /internal/bbc/sessions/:id/associations, which reads GET /api/oidc/{app}/associations.