News for hackers. Stuff that matters.

A comment on Why is OAuth still hard in 2023?. Parent comment

Re:Why is OAuth still hard in 2023? by evntdrvn on Wednesday April 26, 2023 @10:50PM (#35722739)
huh? OAuth is literally a "delegated authorization framework"
[ Parent | on HN ]
Re:Why is OAuth still hard in 2023? by krinchan on Thursday April 27, 2023 @12:43AM (#35723431)
It isn't. OAuth2 really did away with AuthZ and focused on AuthN, regardless of what anyone says.

You have scopes but even those outside of the OIDC scopes are wishy washy and meaningless outside of each implementation.

[ Parent | on HN ]