Aaron Parecki

45°F

Christina Warren https://twitter.com/film_girl • Jun 13
I was just giving an OpenID/Oauth history lesson to some interns, which meant I reference LiveJournal. “What’s LiveJournal?”

“Tumblr before Tumblr...”

ohno am I old

San Francisco, California

1 like

Thu, Jun 13, 2019 4:06pm -07:00
at San Francisco International Airport (SFO)

San Francisco, California • Thu, June 13, 2019 3:47pm

37.616713 -122.387094

Hello San Francisco

San Francisco, CA, United States

29 Coins

Thu, Jun 13, 2019 3:47pm -07:00
Plane

562.57mi
Distance

97:42
Duration

2:08pm
Start

3:46pm
End

Portland, Oregon

Thu, Jun 13, 2019 3:46pm -07:00
Portland (PDX) to San Francisco (SFO)

June 13, 2019 from 2:15pm to 4:03pm (-0700)

United Flight 1833

San Francisco Intl in San Francisco

1 mention

permalink #okta
salt marsh https://friend.camp/@tripofmice

exciting to follow a promising podcast as it matures from terrible sound quality to better editing to being 80% ads

Portland, Oregon

Thu, Jun 13, 2019 6:26pm +00:00 (liked on Thu, Jun 13, 2019 1:59pm -07:00)
Kitt Hodsden https://twitter.com/kitt

Excited to be going to the @indiewebcamp Summit in Portland, OR June 29-30, 2019 - https://2019.indieweb.org/summit - I have so many questions... #indiewebcamp

Portland, Oregon

Thu, Jun 13, 2019 8:37pm +00:00 (liked on Thu, Jun 13, 2019 1:58pm -07:00) #indiewebcamp
Contributions from: Canada, Denmark, Netherlands, Poland, Sweden, United Kingdom, United States

Thu, Jun 13, 2019 1:38pm -07:00
at Portland International Airport (PDX)

Portland, Oregon • Thu, June 13, 2019 1:11pm

45.589391 -122.593457

Feels like I haven't been here in a long time!

Portland, OR, United States

6 Coins

Thu, Jun 13, 2019 1:11pm -07:00
Train

9.01mi
Distance

22:07
Duration

12:48pm
Start

1:10pm
End

Portland, Oregon

Thu, Jun 13, 2019 1:10pm -07:00
San Francisco

Jun

13

Jun

14

June 13-14, 2019

San Francisco, CA, USA

permalink #okta
sentenza https://twitter.com/delphinauge • Jun 13
May I help by providing all the questions that I ask myself after being new to and diving into the OpenId Connect subject?

Yes that would be great! Feel free to send me a link to a blog post or write me an email!

Portland, Oregon

1 reply

Thu, Jun 13, 2019 10:31am -07:00
sentenza https://twitter.com/delphinauge • Jun 13
Thanks, what are the implications of storing the tokens in the browser? Is Auth Code Flow with a backend server much more secure?

yeah, having a backend is much more secure. I feel like this needs to be my next blog post.

Portland, Oregon

1 reply

Thu, Jun 13, 2019 10:21am -07:00
sentenza https://twitter.com/delphinauge • Jun 13
@oktadev @oauth_2 @aaronpk What is the current OpenId Connect recommendation for a SPA without a dedicated backend, is it Auth Code Flow + PKCE in Browser?
#oauth #openidconnect

Yep exactly, I wrote some sample code for doing that here: https://developer.okta.com/blog/2019/05/01/is-the-oauth-implicit-flow-dead

Portland, Oregon

3 replies

Thu, Jun 13, 2019 9:56am -07:00
Jonathan LaCour https://cleverdevil.io/profile/cleverdevil • Jun 13
Taxis are officially superior to ride sharing services again. They are often faster, the drivers are more professional, and they usually know where they are going.

Only the taxis that have their own ride-hailing app! Once taxis started adding ride-hailing and payment via the app, then they're basically all the good parts of Lyft and none of the bad.

I still continue to have a bad time with old-school taxis. The last trip I took the driver asked me to pay in cash but I didn't have enough, so he took $20 cash and the rest on the card, which just feels sketch.

Portland, Oregon

1 reply

Thu, Jun 13, 2019 9:34am -07:00
Darius Kazemi https://friend.camp/@darius

Paul Baran: also apparently doing the xkcd thing 50 years before xkcd
Full paper: https://www.rand.org/pubs/research_memoranda/RM3638.html

Portland, Oregon

Wed, Jun 12, 2019 6:26pm +00:00 (liked on Thu, Jun 13, 2019 9:28am -07:00)
Darius Kazemi https://friend.camp/@darius

I also just learned that store-and-forward packet switching was also referred to as "hot potato routing", which, why is it not still called that??
https://www.rand.org/pubs/research_memoranda/RM3103.html

Portland, Oregon

Wed, Jun 12, 2019 6:20pm +00:00 (liked on Thu, Jun 13, 2019 9:27am -07:00)
Ryan Barrett https://snarfed.org/

guess i’m done for the day

Portland, Oregon

Thu, Jun 13, 2019 7:10am -07:00 (liked on Thu, Jun 13, 2019 9:23am -07:00)
axleyjc https://twitter.com/axleyjc

2. Another hotel franchise, even in another city, could issue a keycard to that same person. Possession of that keycard from another hotel franchise (IdP) does not allow the holder to access *any room* for that person at any hotel (relying party).

Portland, Oregon

Thu, Jun 13, 2019 3:27pm +00:00 (liked on Thu, Jun 13, 2019 9:21am -07:00)
axleyjc https://twitter.com/axleyjc

1. Possession of the hotel keycard does *NOT* in any way prove you are the person who checked into the room it grants access to. Nobody should use the keycard to try to figure out who the person is.

Portland, Oregon

Thu, Jun 13, 2019 3:25pm +00:00 (liked on Thu, Jun 13, 2019 9:21am -07:00)
axleyjc https://twitter.com/axleyjc

I like this analogy!

A couple things that could make it better, especially for those who misuse/abuse OAuth for authentication:

Portland, Oregon

Thu, Jun 13, 2019 3:24pm +00:00 (liked on Thu, Jun 13, 2019 9:21am -07:00)

older