Re:Why is OAuth still hard in 2023?
by sytringy05 on Wednesday April 26, 2023 @08:55PM
(#35721928)
Well hopefully someone has taken the time to, or there will be nasty surprises
I certainly don't want people building security sensitive parts of an app to be slinging the features out.
> As someone who is hired to sling out features as rapidly as possible, that’s not going to happen.
you do you, i guess.
but that's where the source of truth about how oauth 2.0 works is.
the "why" you're looking for it's in there.
...you can't really have it both ways, though. Either you have time to read the detailed docs, in which case there they are in grandparent's post; or you do not, in which case you're going to be putting up with simplified black box abstractions and whatever problems occur when the use case the designer of those had in mind while hiding the complexity from you does not match your own.
I mean, you might say “but you should” or “it would actually help” or “in an ideal world…” but it is still, realistically, not going to happen.