Proper Way to Authenticate Wireless Scanner

[dpitchfo]

We are using an Zebra RFID/Barcode Scanner (M330x) with a custom android app that interfaces to Snipe-IT and app works great.

Now my bosses wants to add security and validate the scanner is being used by the right user. Using a login userid / password is non start because of the screen size and keyboard. My bosses want to use barcode scanner feature of the scanner to scan a QR code that will authenticate the app itself when the scanner is checked out in Snipe-IT.

One thought is to create a new blade that when the device is checked out, it will create a new page with a QR code. This code could be scanned by the barcode scanner to authenticate itself. I think I can create a new blade in resources/views/hardware. The token could be stored in a custom field and is updated or destroyed when the hardware is checked out or checked in. I am concern on what happens on upgrade.

So my question is "Is this the right way of doing this?"

I know there is the oauth capabilities of Snipe-IT, not much documentation and don't even know how to get started or if it will work for my scenario.

Anyone have any suggestions or thoughts on the direction I should take?