News for hackers. Stuff that matters.
Re:Why is OAuth still hard in 2023? by danesparza on Wednesday April 26, 2023 @07:29PM (#35721345)
Yeah -- I think you just described OpenID (not OAuth).

And to be honest, this is part of the problem. We use confusing (and sometimes conflicting) terminology to describe both authentication (identifying somebody) and authorization (making sure you have the right permissions to do something).

More information: https://stackoverflow.com/a/1087071/19020

Re:Why is OAuth still hard in 2023? by eddiezane on Wednesday April 26, 2023 @07:51PM (#35721491)
I recently gave a talk on this and agree. While it was fun to learn, the difference between oauth and oidc isn't clear. Especially with what I've been referring to as oidc "wave 2" - machine to machine authentication without OAuth seemingly involved at all.

https://youtu.be/nW3xK6sh1Ck