WeChat ID
aaronpk_tv
-
Why do we even have OAuth at all? Take five minutes and find out! New video! 🎥👉 https://youtu.be/KT8ybowdyr0 -
oh no, please tell me this help article from Facebook is just way out of date...
https://www.facebook.com/help/249817848463304
"Why am I being asked to enter my email login information while trying to reset my Facebook password?"
They can't still be doing this, right? -
I often talk about the tradeoffs between local and remote access token validation in my OAuth presentations. This blog post by my coworker is a nice demonstration of that in PHP! https://developer.okta.com/blog/2020/01/15/protecting-a-php-api-with-oauth
-
I'm working on a 2020 revision to my book, OAuth 2.0 Simplified!
https://oauth2simplified.com
If you find a typo or other error that I am not already aware of, I will send you an OAuth cat sticker! Send me an email or DM with details if you find something!
-
The confusing part about online security is knowing *when* it's safe to give your SMS two-factor auth codes to a third party.
-
Some more info on OAuth 2.1 from the @oktadev blog:
OAuth 2.1: How many RFCs does it take to change a light bulb?
https://developer.okta.com/blog/2019/12/13/oauth-2-1-how-many-rfcs -
It's Time for OAuth 2.1
Trying to understand OAuth often feels like being trapped inside a maze of specs, trying to find your way out, before you can finally do what you actually set out to do: build your application.continue reading... -
In a couple hours I'll be going live to talk about using #OAuth to protect your APIs! It's not too late to join!
https://twitter.com/oktadev/status/1205173016407097344 -
I'll be live with @oktadev office hours in 30 minutes! Join via Zoom or watch on YouTube! Bring your OAuth and .NET questions!
https://twitter.com/oktadev/status/1204460313216634880 -
Since it's apparently OAuth week (yes I just made that up), this is your periodic reminder to review what third-party apps have access to your accounts!
Here's a link to Twitter security settings: https://twitter.com/settings/applications
and links for other services: https://indieweb.org/appaccess -
Singapore, Singapore • Thu, November 21, 2019 7:35pm#OAuth WG dinner — with anomalily, microformats
-
OH: "at the end of the day, a specification is a programming language designed to run on the worst runtime environment: engineers" @justin__richer #ietf106
-
Singapore, Singapore • Wed, November 20, 2019 12:56pm
-
Just posted a page with the full agenda and links to related specs we'll be discussing at the #IETF106 OAuth meetings this week!
https://oauth.net/events/2019-11-ietf106/
Remote participation is free if you're into that sort of thing. -
wow #oredev is fast with the videos! My "How to Hack OAuth" talk is already posted!
📺 https://vimeo.com/371495209
📜 https://speakerdeck.com/aaronpk/how-to-hack-oauth-oredev-2019 -
Slides from my "How to Hack OAuth" talk at #oredev are up!
https://speakerdeck.com/aaronpk/how-to-hack-oauth-oredev-2019
Thanks everyone for coming to watch and I hope you got something out of it! I'll post again when the video is out! -
Made it to Malmö! Looking forward to Øredev this week where I'll be giving two talks!
⛏🔐 How to Hack OAuth
https://oredev.org/sessions/how-to-hack-oauth
and
🏠🚫☁️ Smarter Home Automation Without the Cloud
https://oredev.org/sessions/smarter-home-automation-without-the-cloud
See you there! 🎉
-
for april 1 next year I think I'm going to change the oauth.net home page to show just a login page that asks you to type in your google username and password and see what happens 😎
-
We are live! and I am dressed as a cat! answering your #OAuth and OpenID Connect questions for @oktadev haunted office hours!
https://www.youtube.com/watch?v=GeSJa4I8Zew
