DEV Community

#oauth

OAuth flow implementation details

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Missions, consent and three tokens: how the AAuth person server decides

Missions, consent and three tokens: how the AAuth person server decides

Comments
5 min read
Call chaining in AAuth: passing authority on with upstream tokens

Call chaining in AAuth: passing authority on with upstream tokens

Comments
5 min read
How to Audit OAuth App Access After a SaaS Supply-Chain Breach

How to Audit OAuth App Access After a SaaS Supply-Chain Breach

1
Comments
9 min read
OAuth Test Emails Need a Replay Budget

OAuth Test Emails Need a Replay Budget

Comments
4 min read
Same lab, different protocol: rebuilding the Biscuit trust lab on AAuth

Same lab, different protocol: rebuilding the Biscuit trust lab on AAuth

Comments 1
6 min read
One-Time Token passwordless Login in spring security

One-Time Token passwordless Login in spring security

Comments
6 min read
Let the model write, not compute: lessons from an MCP coach

Let the model write, not compute: lessons from an MCP coach

Comments 1
4 min read
A Marketplace Invited Us to Bid From Scratch. Here Is the Full Trace, Including the Bugs

A Marketplace Invited Us to Bid From Scratch. Here Is the Full Trace, Including the Bugs

Comments
2 min read
Multi-User Agent Access Control: When OAuth Delegation Meets Shared Execution

Multi-User Agent Access Control: When OAuth Delegation Meets Shared Execution

1
Comments
6 min read
MCP Step-Up Authorization vs. OAuth Incremental Authorization: What Actually Changes?

MCP Step-Up Authorization vs. OAuth Incremental Authorization: What Actually Changes?

5
Comments
19 min read
OpenCode vulnerability allowed third-party servers to execute commands on Windows

OpenCode vulnerability allowed third-party servers to execute commands on Windows

Comments
2 min read
2,900 sign-in attempts a minute: what the ConnectWise campaign teaches about third-party application trust

2,900 sign-in attempts a minute: what the ConnectWise campaign teaches about third-party application trust

Comments 1
4 min read
MCP on OAuth 2.1: one URL and a consent click, no API key

MCP on OAuth 2.1: one URL and a consent click, no API key

Comments
4 min read
AI Agent Impersonation: How Prompt Injection Turns an Agent's Identity Into the Attacker's

AI Agent Impersonation: How Prompt Injection Turns an Agent's Identity Into the Attacker's

Comments
8 min read
Building a Secure Student Portal with WSO2 Identity Server: MFA, JWT Authentication, and Role-Based Access Control

Building a Secure Student Portal with WSO2 Identity Server: MFA, JWT Authentication, and Role-Based Access Control

Comments
12 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.