65°F

Aaron Parecki

  • Articles
  • Notes
  • Photos
  • Tim Ysewyn @ πŸ‡§πŸ‡ͺ🏠 https://twitter.com/TYsewyn   •   Jun 6
    Why should the role be in the token if you have the userinfo endpoint? Or why should there even be a (list of) role(s) in the token if it’s only a means to have access to an endpoint? πŸ€”
    Aaron Parecki
    Some people like to use JWTs for access tokens or other self-encoded mechanisms. There are definitely trade-offs.
    Portland, Oregon
    Thu, Jun 6, 2019 12:20pm -07:00
  • https://rhiaro.co.uk/ https://toot.cat/@rhiaro   •   Jun 6

    I once bought into the "if you don't post to your own website you don't have anything valuable to offer on technology" theory but eventually realised there are other things in tech and, shock horror, even the Web, than posting on your own website. I still see it being thrown around as an excuse to dismiss out of hand work that people don't understand immediately and find directly relevant to their specific needs though.

    Posting this on my own website, so it must be true. https://rhiaro.co.uk/2019/06/theory

    Aaron Parecki
    echoing the rest of that conversation, I think the larger point is the inverse.

    If you *only* post your thoughts about decentralization on platforms that actively work against decentralization and cause real-world harm to people, then maybe it's okay to ignore those thoughts.
    Portland, Oregon
    Thu, Jun 6, 2019 12:17pm -07:00
  • Stephan https://twitter.com/Stephan007   •   Jun 6
    Nice write up! Question: if an authenticated user gets a new/extra role, does the server create a new JWT or is there a way to update the existing token?
    Aaron Parecki
    if your access tokens are just a reference to a record in a database (the hotel key is just a number, and the doors look up access info in a central server), then you can update the roles in the existing token.
    Portland, Oregon
    Thu, Jun 6, 2019 12:13pm -07:00
  • Stephan https://twitter.com/Stephan007   •   Jun 6
    Nice write up! Question: if an authenticated user gets a new/extra role, does the server create a new JWT or is there a way to update the existing token?
    Aaron Parecki
    The analogy continues... with JWT access tokens, that's like encoding access data into the hotel key card. You'd have to go back to the front desk to get a new card.
    Portland, Oregon
    Thu, Jun 6, 2019 12:12pm -07:00
  • Stephan https://twitter.com/Stephan007   •   Jun 6
    Nice write up! Question: if an authenticated user gets a new/extra role, does the server create a new JWT or is there a way to update the existing token?
    Aaron Parecki
    The answer is it depends on how your access tokens / hotel key cards are implemented!
    Portland, Oregon
    Thu, Jun 6, 2019 12:11pm -07:00
  • Your privacy was the real star of Apple’s WWDC19 | Macworld (www.macworld.com)
    Thu, Jun 6, 2019 12:06pm -07:00 #apple #appleid #press
  • Train
    3.92mi
    Distance
    17:59
    Duration
    11:30am
    Start
    11:48am
    End
    Portland, Oregon
    Thu, Jun 6, 2019 11:48am -07:00
  • Aaron Parecki
    at Case Study Coffee
    Portland, Oregon • Thu, June 6, 2019 10:54am
    45.519248 -122.68242
    More coffee
    Portland, OR, United States
    1 Coin
    Thu, Jun 6, 2019 10:54am -07:00
  • Wizages - Sam Patzer https://twitter.com/Wizages   •   Jun 6
    Do you know where you can find the .well-known/openid-configuration on the apple url?
    Do they even use it?
    Aaron Parecki
    I haven't found it yet. I wouldn't be surprised if they just don't have that endpoint
    Portland, Oregon
    1 like 4 replies
    Thu, Jun 6, 2019 10:46am -07:00
  • Aaron Parecki
    at Weissman Dental
    Portland, Oregon • Thu, June 6, 2019 9:16am
    45.519372 -122.683986
    not again 😬
    Portland, OR, United States
    1 Coin
    Thu, Jun 6, 2019 9:16am -07:00
  • Train
    3.85mi
    Distance
    20:03
    Duration
    7:59am
    Start
    8:19am
    End
    Portland, Oregon
    Thu, Jun 6, 2019 8:19am -07:00
  • nov matake https://twitter.com/nov
    apple_id gem v0.1.0 & documentation is ready. Enjoy Sign-in with Apple in Ruby. https://github.com/nov/apple_id/wiki
    Portland, Oregon
    Wed, Jun 5, 2019 3:19pm +00:00 (liked on Thu, Jun 6, 2019 6:51am -07:00)
  • bfulgham https://twitter.com/bfulgham
    WebKit on iOS has always been the same engine as macOS. It was just significantly constrained due to the technical limitations of early iPhones. In iOS 13 we have removed many of these old limitations.
    Portland, Oregon
    Tue, Jun 4, 2019 5:44pm +00:00 (liked on Thu, Jun 6, 2019 6:50am -07:00)
  • 9:47pm
    Asleep
    6:29am
    Awake
    8h 42m
    Slept
    19m
    Awake for
    Portland, Oregon, USA
    Thu, Jun 6, 2019 6:29am -07:00
  • Stephanie Jessop, Space Pirate https://octodon.social/@Taweret

    What if we market tulip bulbs as a hip retro cryptocurrency?

    Portland, Oregon
    Wed, Jun 5, 2019 5:10am +00:00 (liked on Wed, Jun 5, 2019 7:47pm -07:00)
  • Aaron Parecki
    This book by @anomalily definitely helped me get a handle on my money situation. πŸ’΅ You should have seen me before. πŸ™ˆ And now her Kickstarter for the second print run is just shy of the $10,000 stretch goal! Let's get it over the top! πŸš€

    https://www.kickstarter.com/projects/anomalily/a-cats-guide-to-money-illustrated-purrsonal-finance-book
    Portland, Oregon, USA
    9 likes 3 reposts 1 mention
    Wed, Jun 5, 2019 7:20pm -07:00 #kickstarter #ohmydollar
  • Michael Woodburne https://twitter.com/MAWTechnology
    I am not an Apple guy. At all. But I can't help but love what they continue to do for user privacy. Great work @Apple
    Portland, Oregon
    Thu, Jun 6, 2019 1:36am +00:00 (liked on Wed, Jun 5, 2019 7:08pm -07:00)
  • Aaron Parecki
    at Pet Samaritan Clinic
    Portland, Oregon • Wed, June 5, 2019 5:08pm
    45.52305 -122.64009
    Bike trip to the vet with @indiewebcat! 😻
    Portland, OR, United States
    1 Coin
    Wed, Jun 5, 2019 5:08pm -07:00
  • Gokul Thirumalai https://twitter.com/gokult   •   Jun 5
    Thanks Alex. Where do you see the biggest gap that will help you push forward?
    Aaron Parecki
    The docs are also wrong in a few places. Happy to provide details via DM or email.
    Portland, Oregon, USA
    Wed, Jun 5, 2019 4:45pm -07:00
  • Gokul Thirumalai https://twitter.com/gokult   •   Jun 5
    Thanks Alex. Where do you see the biggest gap that will help you push forward?
    Aaron Parecki
    I have so many questions for you! I was able to create a proof of concept, but would love to know some of the missing details. The current documentation is not complete enough to make a working app, I had to guess things based on my knowledge of OIDC.

    https://developer.okta.com/blog/2019/06/04/what-the-heck-is-sign-in-with-apple
    Portland, Oregon, USA
    1 reply
    Wed, Jun 5, 2019 4:40pm -07:00
older

Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video production and livestreaming. (detailed bio)

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Director of Identity Standards at Okta
  • IndieWebCamp Founder
  • OAuth WG Editor
  • OpenID Board Member

  • πŸŽ₯ YouTube Tutorials and Reviews
  • 🏠 We're building a triplex!
  • ⭐️ Life Stack
  • βš™οΈ Home Automation
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Trips
  • Videos
  • Contact
© 1999-2025 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons
WeChat ID
aaronpk_tv