Aaron Parecki

This book by @anomalily definitely helped me get a handle on my money situation. 💵 You should have seen me before. 🙈 And now her Kickstarter for the second print run is just shy of the $10,000 stretch goal! Let's get it over the top! 🚀

https://www.kickstarter.com/projects/anomalily/a-cats-guide-to-money-illustrated-purrsonal-finance-book

I had fun with this one: 7 Ways an OAuth Access Token is like a Hotel Key Card

https://developer.okta.com/blog/2019/06/05/seven-ways-an-oauth-access-token-is-like-a-hotel-key-card

Alright, if you are curious about "Sign In with Apple," I walk through exactly how it works and what it looks like in this post.

https://developer.okta.com/blog/2019/06/04/what-the-heck-is-sign-in-with-apple

#WWDC19 #OAuth #AppleID

Reading all these tweets of people freaking out about Apple requiring apps to use "Sign In with Apple" and feeling another "authentication is not authorization" rant coming. Lots of misunderstanding of sign-in vs accessing APIs. #WWDC19 #OAuth

Initial test of the "Sign in with Apple" API:

• It's more or less based on OAuth + OIDC
• Their documentation is missing a lot of key info to use it right now, I had to guess at a lot of things
• The `sub` claim includes some sort of unique user identifier, not an email

To anyone who thought partial redirect URL matching in @OAuth_2 is "good enough," read this thread. Complete Periscope account takeover just by viewing a tweet. https://hackerone.com/reports/110293 #oauth