News for hackers. Stuff that matters.

A comment on OAuth 2.0 Authentication Vulnerabilities. Parent comment

Re:OAuth 2.0 Authentication Vulnerabilities by oauea on Saturday March 27, 2021 @02:29PM (#26604307)
Nice, that page and your post is basically an ad. You don't need a proven open standard, you need our custom protocol instead!
[ Parent | on HN ]
Re:OAuth 2.0 Authentication Vulnerabilities by pmh on Saturday March 27, 2021 @02:43PM (#26604427)
From a quick glance, it doesn't look like a protocol per se, but a user management system akin to Keycloak. Those solve a slightly different set of problems than OIDC or OAuth
[ Parent | on HN ]
Re:OAuth 2.0 Authentication Vulnerabilities by vwpolo3 on Saturday March 27, 2021 @04:33PM (#26605403)
It explains why OAuth2 is hard to use and does not solve login, registration, sessions, profile management, mfa, and proposes another solution. It’s all open source! :)
[ Parent | on HN ]