News for hackers. Stuff that matters.

A comment on Copilot broke audit logs, but Microsoft won't tell customers. Parent comment

Re:Copilot broke audit logs, but Microsoft won't tell customers by smarx007 on Wednesday August 20, 2025 @08:23AM (#44961249)
MCP tools with OAuth support + RFC 8693 OAuth 2.0 Token Exchange (aka OAuth 2.0 On-Behalf-Of flow in Azure Entra - though I don't think MCP 2025-06-18 accounts for the RFC 8693) could be used to limit the MCP bot responses to what the current user is authorized to see.
[ Parent | on HN ]

There are no comments on this comment yet.