52°F

Aaron Parecki

  • Articles
  • Notes
  • Photos

#OAuth

  • Aaron Parecki

    Hi, I'm Aaron Parecki. I write about OAuth here, and I give talks about OAuth 2.0. Below you'll find my recent posts about various OAuth-related things, including talks I'm giving. I've also written two community resources about OAuth:

    OAuth 2.0 Simplified is a guide to OAuth 2.0 focused on writing clients that gives a clear overview of the spec at an introductory level.

    In 2017, I published a longer version of this guide as a book, available on oauth.com as well as a print version. The book guides you through building an OAuth server, and covers many details that are not part of the spec. I published this book in conjunction with Okta.

    Portland, Oregon
    Sat, Feb 4, 2017 11:35am -08:00 #oauth #oauth2
  • Montreal (YUL) to Charlotte (CLT)
    November 7, 2025 from 2:25pm to 5:10pm (-0500)
    American Airlines Flight 5350
    Charlotte (CLT) to Portland (PDX)
    November 7, 2025 from 6:00pm (-0500) to 8:40pm (-0800)
    American Airlines Flight 1849
    Portland Intl in Portland
    permalink #okta #ietf #oauth
  • IETF 124 Montreal
    Nov
    3
    Nov
    …
    Nov
    7
    November 3-7, 2025
    5 days
    Fairmont The Queen Elizabeth
    Montréal, Québec, CA
    permalink #ietf #oauth #okta
  • Montreal
    Nov
    2
    Nov
    …
    Nov
    7
    November 2-7, 2025
    6 days
    Montreal
    Montreal, Quebec, CA
    permalink #ietf #oauth #okta
  • Portland (PDX) to Boston (BOS)
    November 2, 2025 from 7:20am (-0700) to 3:47pm (-0400)
    Alaska Flight 358
    Boston (BOS) to Montreal (YUL)
    November 2, 2025 from 5:40pm (-0800) to 7:05pm (-0400)
    Air Canada Flight 8611
    Pierre Elliott Trudeau Intl in Montreal
    permalink #okta #oauth #ietf
  • San Jose (SJC) to Portland (PDX)
    October 23, 2025 from 2:50pm to 4:41pm (-0700)
    Alaska Flight 2240
    Portland Intl in Portland
    permalink #okta #iiw #oauth #openid
  • Internet Identity Workshop
    Oct
    21
    Oct
    22
    Oct
    23
    October 21-23, 2025
    3 days
    Computer History Museum
    Mountain View, California, US
    permalink #iiw #oauth #openid #okta
  • Portland (PDX) to San Jose (SJC)
    October 20, 2025 from 7:00am to 8:46am (-0700)
    Alaska Flight 2210
    Norman Y Mineta San Jose Intl in San Jose
    permalink #iiw #okta #oauth #openid
  • Mountain View, CA
    Oct
    20
    Oct
    …
    Oct
    23
    October 20-23, 2025
    4 days
    Computer History Museum
    Mountain View, California, US
    permalink #okta #iiw #oauth #openid
  • Oktane
    Sep
    24
    Sep
    25
    Sep
    26
    September 24-26, 2025
    3 days
    CAESARS FORUM
    Las Vegas, Nevada, US
    permalink #okta #oktane #oauth #openid
  • IETF 123 Madrid
    Jul
    21
    Jul
    …
    Jul
    25
    July 21-25, 2025
    5 days
    Meliá Castilla
    Madrid, Comunidad de Madrid, ES
    permalink #ietf #oauth #okta
  • Aaron Parecki
    The latest version of the MCP spec is now officially 2025-06-18! Congrats to everyone in the MCP community involved in making this happen!

    Key updates to the authorization section:

    ⚙️ MCP Servers are no longer responsible for issuing access tokens or handling user authentication
    🛡️ A dedicated Authorization Server separate from the MCP Server handles user authentication and issuing access tokens
    🔍 RFC9728 Protected Resource Metadata enables the MCP client to dynamically discover the MCP Server's authorization server
    👉 RFC8707 Resource Indicators are required as a security measure

    Thanks to everyone who contributed to the many discussions to update the authorization part of the spec to be more compatible with existing OAuth systems!

    David Soria Parra, Paul Carleton, Den Delimarsky, Nate Barbettini, William Dawson, Jared Hanson, Karl McGuinness, Darin McAdams, Jean-François LOMBARDO and apologies if I forgot to mention you, those threads were extremely long!

    #modelcontextprotocol #mcp #oauth #ai
    Portland, Oregon, USA • 70°F
    1 like 3 replies
    Wed, Jun 18, 2025 7:07pm -07:00 #modelcontextprotocol #mcp #oauth #ai
  • Aaron Parecki
    Presenting "The State of OAuth" at Identiverse
    Portland, Oregon, USA
    Wed, Jun 4, 2025 2:08pm -07:00 #oauth #identiverse #365 #okta
  • The State of OAuth 2025
    Jun
    4
    June 4, 2025 2:00pm - 2:25pm (-0700)
    Mandalay Bay Convention Center
    Las Vegas, Nevada, US
    Identiverse 2025
    View Slides
    permalink #oauth
  • Identiverse
    Jun
    3
    Jun
    …
    Jun
    6
    June 3-6, 2025
    4 days
    Mandalay Bay Convention Center
    Las Vegas, Nevada, US
    permalink #okta #openid #identity #oauth #identiverse
  • Portland (PDX) to Las Vegas (LAS)
    June 2, 2025 from 10:55am to 1:13pm (-0700)
    Alaska Flight 757
    Mc Carran Intl in Las Vegas
    permalink #okta #identiverse #oauth
  • Las Vegas
    Jun
    2
    Jun
    …
    Jun
    6
    June 2-6, 2025
    5 days
    Mandalay Bay Convention Center
    Las Vegas, Nevada, US
    permalink #identiverse #okta #oauth
  • San Francisco (SFO) to Portland (PDX)
    May 23, 2025 from 8:30pm to 10:16pm (-0700)
    Alaska Flight 2464
    Portland Intl in Portland
    permalink #okta #mcp #oauth
  • Intro to OAuth for MCP Servers
    May
    23
    May 23, 2025 10:00am - 10:30am (-0700)
    San Francisco, California
    MCP Dev Summit
    Watch Video
    permalink #oauth #mcp
  • MCP Developers Summit
    May
    23
    May 23, 2025 8:00am - 6:00pm (-0700)
    Convene 100 Stockton
    San Francisco, California, US
    permalink #oauth #mcp #okta
  • San Francisco
    May
    20
    May
    …
    May
    23
    May 20-23, 2025
    4 days
    Okta
    San Francisco, California, US
    permalink #okta #mcp #oauth
older

Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video production and livestreaming. (detailed bio)

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Director of Identity Standards at Okta
  • IndieWebCamp Founder
  • OAuth WG Editor
  • OpenID Board Member

  • 🎥 YouTube Tutorials and Reviews
  • 🏠 We're building a triplex!
  • ⭐️ Life Stack
  • ⚙️ Home Automation
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Trips
  • Videos
  • Contact
© 1999-2025 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons
WeChat ID
aaronpk_tv