News for hackers. Stuff that matters.

A comment on Building a Personal AI Factory. Parent comment

Re:Building a Personal AI Factory by fragmede on Tuesday July 01, 2025 @11:06PM (#44439918)
I think Cloudflare's oauth library qualifies https://news.ycombinator.com/item?id=44159166
[ Parent | on HN ]
Re:Building a Personal AI Factory by gen6acd60af on Wednesday July 02, 2025 @01:57AM (#44440627)
This one?

>Claude's output was thoroughly reviewed by Cloudflare engineers with careful attention paid to security and compliance with standards.

>To emphasize, this is not "vibe coded". Every line was thoroughly reviewed and cross-referenced with relevant RFCs, by security experts with previous experience with those RFCs.

Some time later...

https://github.com/advisories/GHSA-4pc9-x2fx-p7vj / CVE-2025-4143

>The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp, did not correctly validate that redirect_uri was on the allowed list of redirect URIs for the given client registration.

[ Parent | on HN ]
Re:Building a Personal AI Factory by kentonv on Wednesday July 02, 2025 @08:38AM (#44443019)
Sorry, my code has bugs sometimes.
[ Parent | on HN ]