DEV Community

#oauth

OAuth flow implementation details

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
MCP for tour guides: building a remote MCP server with ~100 tools and OAuth

MCP for tour guides: building a remote MCP server with ~100 tools and OAuth

Comments
6 min read
A Deactivated User With a Live Token: Reading Concrete CMS CVE-2026-85387 as a Revocation Gap

A Deactivated User With a Live Token: Reading Concrete CMS CVE-2026-85387 as a Revocation Gap

Comments
3 min read
How exactly would you validate the OAuth scope in Apigee? Which policy or condition would you use?

How exactly would you validate the OAuth scope in Apigee? Which policy or condition would you use?

5
Comments
2 min read
The OAuth Grants Nobody Reviews: Governing Third-Party SaaS Access

The OAuth Grants Nobody Reviews: Governing Third-Party SaaS Access

Comments
4 min read
Your IMAP script stopped logging in: XOAUTH2 for Gmail and Microsoft 365

Your IMAP script stopped logging in: XOAUTH2 for Gmail and Microsoft 365

1
Comments
12 min read
OAuth for AI Agents: Why General-Purpose Agents Strain the Integration Model

OAuth for AI Agents: Why General-Purpose Agents Strain the Integration Model

Comments 1
10 min read
OAuth Test Emails Need a Replay Budget

OAuth Test Emails Need a Replay Budget

1
Comments
4 min read
Introspection and Delegations: Authorising Agents Per User, Per Operation

Introspection and Delegations: Authorising Agents Per User, Per Operation

Comments
3 min read
Securing the Token Vault: Encrypted State, Refresh Rotation and Safe Logs

Securing the Token Vault: Encrypted State, Refresh Rotation and Safe Logs

Comments
2 min read
PingFederate as a Token Courier: Linking Entra with the Reference ID Adapter

PingFederate as a Token Courier: Linking Entra with the Reference ID Adapter

Comments
2 min read
What we learned putting social media APIs behind a hosted MCP server

What we learned putting social media APIs behind a hosted MCP server

Comments
3 min read
OAuth Redirect Tests Need a Client Trust Map

OAuth Redirect Tests Need a Client Trust Map

1
Comments
5 min read
The MCP Session Refresh Gotcha: Why "Token Expired" and "Session Expired" Are Not the Same Bug

The MCP Session Refresh Gotcha: Why "Token Expired" and "Session Expired" Are Not the Same Bug

1
Comments
6 min read
OAuth Callback Tests Need a State Ledger

OAuth Callback Tests Need a State Ledger

1
Comments
5 min read
On-Behalf-Of Is a Pattern. Token Exchange Is the Standard.

Real-world agent wallets expose RFC 8693 limits

On-Behalf-Of Is a Pattern. Token Exchange Is the Standard.

2
Comments 6
11 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.