SAML is bad, but OAuth and OIDC are showing major cracks with identity and agents. Go to any major company right now and ask them how they are dealing with authenticating agents/what an agent identity even is.
The XSW part of the article was new to me though and kinda shocking
RFC8628 has been out for eight years, OAuth isn't standing in the way of bots anymore.
OAuth/OIDC is a problem if you're trying to shove a bot-shaped peg into a browser-shaped hole, but we don't need a new protocol to solve that.
miguelspizza · · focus · HN ↗
The XSW part of the article was new to me though and kinda shocking
jeroenhd · · focus · HN ↗
OAuth/OIDC is a problem if you're trying to shove a bot-shaped peg into a browser-shaped hole, but we don't need a new protocol to solve that.