52°F

Aaron Parecki

  • Articles
  • Notes
  • Photos

#OAuth

  • Aaron Parecki

    Hi, I'm Aaron Parecki. I write about OAuth here, and I give talks about OAuth 2.0. Below you'll find my recent posts about various OAuth-related things, including talks I'm giving. I've also written two community resources about OAuth:

    OAuth 2.0 Simplified is a guide to OAuth 2.0 focused on writing clients that gives a clear overview of the spec at an introductory level.

    In 2017, I published a longer version of this guide as a book, available on oauth.com as well as a print version. The book guides you through building an OAuth server, and covers many details that are not part of the spec. I published this book in conjunction with Okta.

    Portland, Oregon
    Sat, Feb 4, 2017 11:35am -08:00 #oauth #oauth2
  • San Francisco
    Nov
    15
    Nov
    …
    Nov
    20
    November 15-20, 2026
    6 days
    San Francisco
    San Francisco, California, US
    permalink #okta #ietf #oauth
  • IETF 127 San Francisco
    Nov
    15
    Nov
    …
    Nov
    20
    November 15-20, 2026
    6 days
    Hilton San Francisco Union Square
    San Francisco, California, US
    permalink #okta #oauth #ietf
  • Internet Identity Workshop
    Nov
    3
    Nov
    4
    Nov
    5
    November 3-5, 2026
    3 days
    Computer History Museum
    Mountain View, California, US
    permalink #okta #iiw #oauth #openid
  • Mountain View
    Nov
    2
    Nov
    …
    Nov
    5
    November 2-5, 2026
    4 days
    Mountain View
    Mountain View, California, US
    permalink #okta #iiw #oauth #openid
  • Zagreb (ZAG) to London (LHR)
    July 28, 2026 from 8:20pm (+0200) to 9:45pm (+0100)
    American Airlines Flight 6775
    London (LHR) to Portland (PDX)
    July 29, 2026 from 3:40pm (+0100) to 5:40pm (-0700)
    American Airlines Flight 6956
    Portland Intl in Portland
    permalink #okta #ietf #oauth
  • IETF 126 Vienna
    Jul
    19
    Jul
    …
    Jul
    24
    July 19-24, 2026
    6 days
    Hilton Vienna Park
    Wien, Wien, AT
    permalink #ietf #oauth #okta
  • Portland (PDX) to London (LHR)
    July 18, 2026 at 7:30pm (-0700) until Jul 19 at 1:00pm (+0100)
    British Airways Flight 266
    London (LHR) to Vienna (VIE)
    July 19, 2026 from 7:20pm (+0100) to 10:30pm (+0200)
    British Airways Flight 728
    Schwechat in Vienna
    permalink #ietf #oauth #okta
  • Vienna, Maribor, Zagreb
    Jul
    18
    Jul
    …
    Jul
    28
    July 18-28, 2026
    11 days
    Vienna
    Vienna, Vienna, AT
    permalink #ietf #oauth #okta
  • Las Vegas (LAS) to Portland (PDX)
    June 18, 2026 from 6:26pm to 8:47pm (-0700)
    Alaska Flight 779
    Portland Intl in Portland
    permalink #okta #identiverse #oauth #mcp
  • Identiverse
    Jun
    15
    Jun
    …
    Jun
    18
    June 15-18, 2026
    4 days
    Mandalay Bay
    Las Vegas, Nevada, US
    permalink #okta #identiverse #oauth #mcp
  • Portland (PDX) to Las Vegas (LAS)
    June 14, 2026 from 5:50pm to 8:15pm (-0700)
    Alaska Flight 531
    Mc Carran Intl in Las Vegas
    permalink #okta #identiverse #mcp #oauth
  • Aaron Parecki
    The "Agent Verified" signup flow from WorkOS is exactly what I've been telling the agent platforms they should be doing with Cross App Access! Very cool to see this launch! 👏

    https://workos.com/auth-md/docs/flows/verified

    "The agent's provider — OpenAI, Anthropic, Cursor, or any trusted agent platform — attests to the user's identity at registration time. Your service verifies the attestation and issues credentials synchronously, no human interaction required."

    In Cross App Access terms:

    • The "agent platform/provider" is the ID-JAG issuer, because users are already signed in to those platforms when they use agents
    • The "service" is the ID-JAG consumer (the Resource AS), and issues an access token if the ID-JAG is trusted and valid

    You can test this out in the Cross App Access sandbox today! https://xaa.dev/
    Portland, Oregon, USA • 79°F
    Thu, May 21, 2026 7:12pm -07:00 #oauth #xaa #ai #okta
  • San Jose (SJC) to Portland (PDX)
    May 1, 2026 from 9:38am to 11:28am (-0700)
    Alaska Flight 2274
    Portland Intl in Portland
    permalink #iiw #okta #oauth #openid
  • Internet Identity Workshop
    Apr
    28
    Apr
    29
    Apr
    30
    April 28-30, 2026
    3 days
    Computer History Museum
    Mountain View, California, US
    permalink #iiw #oauth #openid #okta
  • Portland (PDX) to San Jose (SJC)
    April 27, 2026 from 9:07pm to 10:59pm (-0700)
    Alaska Flight 3344
    Norman Y Mineta San Jose Intl in San Jose
    permalink #iiw #oauth #openid #okta
  • Mountain View
    Apr
    27
    Apr
    …
    Apr
    30
    April 27-30, 2026
    4 days
    Mountain View
    Mountain View, California, US
    permalink #iiw #oauth #openid #okta
  • Cross App Access (XAA): The enterprise way to govern AI app integrations — WorkOS (workos.com)
    Wed, Apr 1, 2026 11:14am -04:00 #mcp #xaa #oauth
  • Hong Kong (HKG) to Vancouver (YVR)
    March 25, 2026 from 3:30pm (+0800) to 12:00pm (-0700)
    Cathay Pacific Flight 838
    Vancouver (YVR) to Portland (PDX)
    March 25, 2026 from 4:50pm to 6:30pm (-0700)
    Air Canada Flight 8654
    Portland Intl in Portland
    permalink #ietf #oauth
  • Nanjing (NKG) to Hong Kong (HKG)
    March 25, 2026 from 8:20am to 11:00am (+0800)
    Cathay Pacific Flight 399
    Hong Kong (HKG) to Los Angeles (LAX)
    March 25, 2026 from 12:35pm (+0800) to 10:15am (-0700)
    Cathay Pacific Flight 884
    Los Angeles (LAX) to Portland (PDX)
    March 25, 2026 from 6:06pm to 8:39pm (-0700)
    Alaska Flight 1397
    Portland Intl in Portland
    permalink #okta #ietf #oauth
  • IETF 125 Shenzhen
    Mar
    14
    Mar
    …
    Mar
    20
    March 14-20, 2026
    7 days
    Futian Shangri-La, Shenzhen
    Shen Zhen Shi, Guang Dong Sheng, CN
    permalink #ietf #oauth
older

Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video production and livestreaming. (detailed bio)

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Director of Identity Standards at Okta
  • IndieWebCamp Founder
  • OAuth WG Editor
  • OpenID Board Member

  • 🎥 YouTube Tutorials and Reviews
  • 🏠 We're building a triplex!
  • ⭐️ Life Stack
  • ⚙️ Home Automation
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Trips
  • Videos
  • Contact
© 1999-2026 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons
WeChat ID
aaronpk_tv