4 ms·
Not sure if this is news. The lead author of OAuth 2 resigned from the OAuth working group 2 years ago, citing all the security flaws inherent in the OAuth 2 sp
by talklittle 12y ago
Not sure if this is news. The lead author of OAuth 2 resigned from the OAuth working group 2 years ago, citing all the security flaws inherent in the OAuth 2 spec.
http://www.cnet.com/news/oauth-2-0-leader-resigns-says-standard-is-bad/ http://www.cnet.com/news/oauth-2-0-leader-resigns-says-stand...
OP just spells out one way to take advantage of OAuth 2, and tacks on a sensational title.
- exelius 12y agoAgreed; I thought that the general consensus was that OAuth2 was severely flawed (and why many sites stuck with OAuth1). Been a few years since I worked with OAuth though, so I could be wrong.
- deleted 12y ago[deleted]
- cratermoon 12y agoOpenID-Connect is the most current spec in that world.