News for hackers. Stuff that matters.

jonbake

I argue that the complexity you are describing is inherent in any solution where multi-level sessions are present-- whether the auth mechanisms is OIDC, SAML, or something bespoke. Beyond social logins, there are use cases where multi-level sessions are required. One example is delegating authentication to another IdP. It's possible to use a OIDC client and configure the IdP to not create a session if multi-level sessions are not required.
Re:How to Identify a Scientific Fact on Thursday December 29, 2022 @08:41PM (#34180670)
Is that really a fact? It seems like _scientific fact_ is a misnomer. Nothing can ever be a fact in science, even with 95% consensus.
Re:Wells Fargo to Pay $3.7B for Mistreating Customers on Tuesday December 20, 2022 @07:35PM (#34075093)
Why would anyone continue to give Wells Fargo business at this point? Rates between various banks are competitive. It seems like the deciding factor in which bank to choose is how well they treat their customers, which WF fails miserably at.