Explores using SPIFFE workload identity for AI agents, highlighting technical gaps in current Kubernetes implementations for non-deterministic agent behavior.
Explores the challenges of delegating authority to AI agents due to fragmented user identities and ungoverned authorization systems in enterprises.
Designing Google CalDAV support for pimsync, focusing on Google's unique calendar paths and OAuth authentication flow.
Explains the shift from embedded WebViews to system browsers for OAuth flows, as defined in RFC 8252, focusing on security and usability.
Step-by-step guide to setting up OAuth social logins (Google, GitHub) in Next.js using Next-Auth V5.
A guide to implementing a Backend for Frontend (BFF) architecture with .NET, Duende, and Auth0 to enhance SPA security by moving token handling server-side.
A Ruby guide for automating Reddit API access using OAuth authentication to scrape subreddit stories.
A comprehensive guide to all OAuth 2.0 grant types, explaining their flows and use cases for secure application authorization.
Announcing the new OpenIddict client library for .NET, designed to provide a unified OAuth 2.0/OpenID Connect experience across different application types.
Debugging ASP.NET Core OAuth authentication in GitHub Codespaces, including reserved path conflicts and callback URL issues.
A technical guide on migrating existing social media user accounts (like Google) to Azure AD B2C using Microsoft Graph API and a .NET application.
A guide to implementing the OAuth 2.0 PKCE authorization flow for secure access in single-page and mobile applications.
Explains delegation of authority in security, focusing on SQL Server and Azure AD, covering identity vs. authorization level delegation and practical examples.
Explains the differences between cookies and tokens for API authentication, covering OAuth, JWT, and deployment considerations.
OpenIddict 3.0 RC1 released, focusing on bug fixes and removing error description localization to comply with OAuth 2.0 specs.
Explores using OrchardCore's OpenID management feature as an alternative to IdentityServer, focusing on integration with an existing OpenIddict deployment.
Exploring client-side certificates as a simpler, more secure alternative to OAuth for API authentication.
A developer's guide to implementing Sign-in with Apple, focusing on challenges with one-time profile data and security considerations.
Explains how to use OpenIddict 3.0's degraded mode to create a minimalist OpenID Connect proxy server for delegating authentication.
A quick fix for Fantastical or Mac Calendar not displaying Google Shared Calendars by adjusting sync settings.
