Aaron Parecki

:sigh: another day, another website that hardcodes their @oauth_2 client secret in JavaScript 🤦‍♂️

There’s nothing like sitting in on the #ietf TLS meeting to make you realize how little you actually know about how the internet works

Cannot believe it, but I made it with 15 minutes to spare, just enough time to drop my bags in my room and grab my nametag from registration!

Thanks @AirCanada for a smooth flight this morning!

#ietf105

The @ietf "105attendees" mailing list is like a slow motion version of a Slack channel with way too many people in it. #ietf105

On my way to Montreal to talk about OAuth #ietf105! Crossing my fingers the connection at Newark goes well despite the impending thunderstorms.

I have some time free while I'm there this week, so if you're in the area and want to grab coffee let me know!

Some thoughts on adding identity to OAuth XYZ, a new draft spec to be discussed at #ietf105 next week.

If we're going to re-think OAuth from the ground up, we should build in support for common use cases.

https://aaronparecki.com/2019/07/18/17/adding-identity-to-xyz

Good reminder to add "check whether the password field supports pasting from password managers" to my list of criteria when deciding where to open a bank account. https://twitter.com/KeyBank_Help/status/1148247347463446528

Some great tips on developer experience from my friend @rod_laura!

📖 Publish open source
✍️ Communicate clearly
💻 Create lots of sample code
📝 Share on your blog
🌱 Build a community

https://developer.okta.com/blog/2019/06/10/five-essential-tips-for-building-developer-libraries

Last week I sat down with @nbarbettini to answer some questions about what's going on with the @OAuth_2 Implicit flow. #oauth 🎥➡ https://www.youtube.com/watch?v=CHzERullHe8

I had fun with this one: 7 Ways an OAuth Access Token is like a Hotel Key Card

https://developer.okta.com/blog/2019/06/05/seven-ways-an-oauth-access-token-is-like-a-hotel-key-card