Tag: security

All the articles with the tag "security".

• Making OAuth Testable: Rethinking OIDC Clients in JavaScript

  May 3, 2026

  How separating protocol logic from runtime concerns makes OAuth testable without mocks, using a functional core and thin framework adapters tested against a real identity provider.

• I Found 5 Security Bugs in My OAuth2 Provider on My First Try (With an MCP Security Tool)

  Apr 9, 2026

  How connecting go-appsec/toolbox to Claude Code revealed five vulnerabilities in Autentico, including a HIGH severity unauthenticated token introspection issue, on the very first session.