Tag: oidc

All the articles with the tag "oidc".

• Making OAuth Testable: Rethinking OIDC Clients in JavaScript

  May 3, 2026

  How separating protocol logic from runtime concerns makes OAuth testable without mocks, using a functional core and thin framework adapters tested against a real identity provider.

• I Found 5 Security Bugs in My OAuth2 Provider on My First Try (With an MCP Security Tool)

  Apr 9, 2026

  How connecting go-appsec/toolbox to Claude Code revealed five vulnerabilities in Autentico, including a HIGH severity unauthenticated token introspection issue, on the very first session.

• Why I Built an Identity Provider in Go and SQLite

  Mar 26, 2026

  How and why I built Autentico, a self-contained, single-binary OIDC provider backed by SQLite that removes the ceremony from identity management.