WeChat ID
aaronpk_tv
-
This morning I gave a talk to 600 people while sitting on my couch drinking coffee. ☕️ I could get used to this virtual conference thing. #Oktane20 #JustQuarantineThings -
Digital Spring Cleaning
Well, it's Spring, and we're all stuck inside! 😃 So why not use this time to do a little Spring cleaning and declutter your digital life. We all have things we know we should do that we keep putting off. Here are a few things you can do to tidy things up and improve your online security in a time when most of us are interacting only online.continue reading... -
Just published a talk I gave at a virtual conference: How to Hack OAuth
It's been fun to be able to "speak" at conferences in a highly edited format instead of winging it on stage! I hope it's more fun to watch as a viewer too!
https://www.youtube.com/watch?v=aU9RsE4fcRM -
Going live in about an hour at Spring Live, doing a talk on how to hack OAuth!
Join here ➡️ https://connect.tanzu.vmware.com/Spring_Live.html
Welcome to the new world of virtual conferences!
-
The first draft of OAuth 2.1 is out! Thanks so much to @tlodderstedt and @DickHardt for their work on this!
https://aaronparecki.com/2020/03/11/14/oauth-2-1 -
First Draft of OAuth 2.1
I'm happy to share that Dick and Torsten and I have published a first draft of OAuth 2.1. We've taken the feedback from the discussions on the list and incorporated that into the draft.continue reading... -
The second video in my "OAuth in Five Minutes" series is up!
🎥 "What's the difference between confidential and public clients?"
https://www.youtube.com/watch?v=5cQNwifDq1U -
San Francisco, California • Tue, February 11, 2020 8:35am
-
Why do we even have OAuth at all? Take five minutes and find out! New video! 🎥👉 https://youtu.be/KT8ybowdyr0
-
oh no, please tell me this help article from Facebook is just way out of date...
https://www.facebook.com/help/249817848463304
"Why am I being asked to enter my email login information while trying to reset my Facebook password?"
They can't still be doing this, right? -
I often talk about the tradeoffs between local and remote access token validation in my OAuth presentations. This blog post by my coworker is a nice demonstration of that in PHP! https://developer.okta.com/blog/2020/01/15/protecting-a-php-api-with-oauth
-
I'm working on a 2020 revision to my book, OAuth 2.0 Simplified!
https://oauth2simplified.com
If you find a typo or other error that I am not already aware of, I will send you an OAuth cat sticker! Send me an email or DM with details if you find something!
-
The confusing part about online security is knowing *when* it's safe to give your SMS two-factor auth codes to a third party.
-
Some more info on OAuth 2.1 from the @oktadev blog:
OAuth 2.1: How many RFCs does it take to change a light bulb?
https://developer.okta.com/blog/2019/12/13/oauth-2-1-how-many-rfcs -
It's Time for OAuth 2.1
Trying to understand OAuth often feels like being trapped inside a maze of specs, trying to find your way out, before you can finally do what you actually set out to do: build your application.continue reading... -
In a couple hours I'll be going live to talk about using #OAuth to protect your APIs! It's not too late to join!
https://twitter.com/oktadev/status/1205173016407097344 -
I'll be live with @oktadev office hours in 30 minutes! Join via Zoom or watch on YouTube! Bring your OAuth and .NET questions!
https://twitter.com/oktadev/status/1204460313216634880 -
Since it's apparently OAuth week (yes I just made that up), this is your periodic reminder to review what third-party apps have access to your accounts!
Here's a link to Twitter security settings: https://twitter.com/settings/applications
and links for other services: https://indieweb.org/appaccess -
