OAuth2 device flow in elisp?

I'm trying to authenticate and query the MS Azure Devops API. The oauth2.el library requires the use of a client-secret which (as far as I understand it) is not appropriate in this case and which I don't have - I just have the client id. I'd like to use device-flow anyway. Is there any existing library I could use?

https://docs.microsoft.com/en-us/azure/devops/integrate/get-started/authentication/oauth?view=azure-devops explains how the OAuth2 flow looks like, what data public/private apps have and what requests to make. You might be able to get this working with oauth2.el or you might have to write your own code based on what it does. Such is OAuth2, a surprisingly complex set of puzzle parts many services use to build subtly incompatible authorization flows with.