Aaron Parecki

#oidc

• The Real Cause of the Sign In with Apple Zero-Day

  

  The zero-day bug in Sign In with Apple actually had nothing to do with the OAuth or OpenID Connect part of the Sign In with Apple exchange, and very little to do even with JWTs. Let's take a closer look to see what actually happened.

  continue reading...

  37 likes 19 reposts 1 bookmark 9 replies 25 mentions

  #oauth #oidc #apple #siwa #security #zeroday

  Sun, May 31, 2020 1:49pm -07:00
• 

  Going live with @afitnerd in 10 minutes to talk about all things #OAuth and OpenID Connect! I think we might even have a demo of a pretty sneaky attack to show off!
  
  https://youtu.be/moQidjdV5cw

  Portland, Oregon • 56°F

  2 likes 2 reposts

  #oauth #oidc

  Thu, May 21, 2020 12:49pm -07:00
• OktaDev https://twitter.com/oktadev

  Join @aaronpk and @afitnerd this week on Thursday for an OAuth Happy Hour! An hour of live Q&A about all things #OAuth and #OIDC. Bring your questions or just hear about what's new!
  
  https://okta.zoom.us/webinar/register/WN_jIcSZxoPQD6sgk1-EpRJfQ

  Portland, Oregon • 54°F

  #OAuth #OIDC

  Mon, Apr 20, 2020 5:24pm +00:00 (liked on Mon, Apr 20, 2020 10:56am -07:00)
• What's New with OAuth and OpenID Connect?

  Apr

  1

  April 1, 2020 12:00pm - 1:00pm (-0700)

  Online

  Oktane20 Live

  View Slides

  Watch Video

  #oauth #oidc #oktane #oktane20

  permalink
• Heather Downing https://twitter.com/quorralyne

  Had a great time auditing @aaronpk's #OAuth & #OIDC workshop today. We have such knowledgeable people on the Dev Advocate team at @oktadev 🥰

  

  Portland, Oregon

  #OAuth #OIDC

  Tue, Aug 20, 2019 1:15am +00:00 (liked on Mon, Aug 19, 2019 8:26pm -07:00)
• 

  Something about Apple's decision to do "OAuth-but-not-quite" rubbed me the wrong way, but this is a great example of how it breaks down very concretely.
  
  https://twitter.com/atomicbird/status/1163478833326108673

  Santa Ana, California, USA

  18 likes 9 reposts 6 replies

  #apple #oauth #openid #oidc

  Mon, Aug 19, 2019 2:29pm -07:00
• Steve Hutchinson https://twitter.com/IdentityHutch

  Nice rebuttal by @scottbrady91 from @rskltd to Okta's “Nobody Cares About #OAuth or #OpenID Connect.” I agree that developers should care and #identity professionals should elevate the discourse. @idpro_org @openid #OIDC https://www.scottbrady91.com/OAuth/Why-Developers-Do-Care-About-OAuth-and-OpenID-Connect

  Portland, Oregon • 42°F

  #OAuth #OpenID #identity #OIDC

  Mon, Jan 28, 2019 3:57pm +00:00 (liked on Mon, Jan 28, 2019 8:04am -08:00)
• Brock Allen https://twitter.com/BrockLAllen

  The State of the Implicit Flow in OAuth2 https://brockallen.com/2019/01/03/the-state-of-the-implicit-flow-in-oauth2/ #oauth2 #oidc #aspnetcore

  Portland, Oregon • 53°F

  #oauth2 #oidc #aspnetcore

  Thu, Jan 3, 2019 9:54pm +00:00 (liked on Thu, Jan 3, 2019 2:30pm -08:00)
• Jim Shingler https://twitter.com/jshingler

  @aaronpk talking #Oauth2 and #OIDC at #cardinalhealth great meeting thanks @okta

  

  Columbus, Ohio • 72°F

  1 mention

  #Oauth2 #OIDC #cardinalhealth

  Thu, Oct 11, 2018 12:04am +00:00 (liked on Wed, Oct 10, 2018 8:23pm -04:00)
• OAuth.io https://try.oauth.io

  We will be talking about 'The Many Flavors of OAuth' at @APIdaysGlobal San Francisco about #oauth2 and briefly covering identity layers #openidconnect #oidc and #IndieAuth. We have a few tickets to giveaway. Please register with code 'Soonhin' at https://www.apidays.co/sanfrancisco. See you!

  Portland, Oregon • 95°F

  #oauth2 #openidconnect #oidc #IndieAuth

  Mon, Jul 30, 2018 1:47am +00:00 (liked on Sun, Jul 29, 2018 7:44pm -07:00)
• Khor https://twitter.com/neth_6

  Will be talking about 'The Many Flavors of OAuth' at https://www.apidays.co/sanfrancisco including brief overview of identity layers #openidconnect #oidc, and #IndieAuth. Use code 'Soonhin' to get free tix. @aaronpk thanks for https://aaronparecki.com/2018/07/07/7/oauth-for-the-open-web.

  Portland, Oregon • 73°F

  #openidconnect #oidc #IndieAuth

  Sun, Jul 29, 2018 4:37pm +00:00 (liked on Sun, Jul 29, 2018 9:41am -07:00)
• Nate Barbettini https://www.recaffeinate.co/

  Gave an updated version of my talk on OAuth and OpenID Connect recently at the Portland .NET meetup. Thanks to @aaronpk for recording! #oauth #oidc https://buff.ly/2qh9Y3V

  Portland, Oregon • 50°F

  1 mention

  #oauth #oidc

  Wed, Apr 11, 2018 8:56am -07:00 (liked on Wed, Apr 11, 2018 9:16am -07:00)
• Why we need a id_token in openID Connect & Facebook Connect | Thread Safe (www.thread-safe.com)

  

  #openid #oidc #openidconnect #id_token

  Tue, Apr 25, 2017 6:27pm -07:00