The IETF OAuth Working Group has adopted the Identity Assertion Authorization Grant specification! datatracker.ietf.org/doc/draft-ie... This is the basis of Cross App Access (XAA), providing IT admins better visibility and control by configuring the app-to-app connections in their enterprise IdP.

Inspired by a question from @thisismissem.social, I wrote up a document describing how to apply DPoP (RFC9449) to the OAuth Device Flow (RFC8628). datatracker.ietf.org/doc/draft-pa...

Well that's the last time I take my ID out of my wallet to go through airport security. I made the mistake of putting it into my pocket instead of back in my wallet and it seems to have fallen out somewhere between PDX and SFO 🫠

I just got FreePBX up and running and connected to a WiFi phone and my doorbell and video intercom system! I have two way calling between every device, I can even connect analog phones!

The latest version of the MCP spec is now officially 2025-06-18! Congrats to everyone in the MCP community involved in making this happen! Key updates to the authorization section 👇

TIL the point up emoji ☝️ doesn't work as a reaction on iMessage because Apple displays the emoji above the message it's a reaction to 😂

In two weeks I'll be speaking at @mcpdevsummit.bsky.social in San Francisco! MCP has quickly reshaped how developers are building AI agents. My talk "Intro to OAuth for MCP Servers" will cover the basics of the MCP authorization protocol and set the stage for building secure MCP servers.

🎤 Speaker Spotlight: Aaron Parecki, Director of Identity Standards at @okta Learn how #OAuth applies to #MCP servers and why securing your #MCP server is critical To attend this session and more register at buff.ly/NzqdbNE @aaronpk.com #AI #LLM #ModelContextProtocol #MCPDevSummit

oh no I just realized tomorrow is Monday

Is it just me or does this current Model Context Protocol wave remind anyone of the early Web 2.0 days of everyone launching open APIs?

I've got 22 hours in Hong Kong on a layover and I'm staying overnight in a hotel near the old Kowloon Walled City. Any tips for what I should do on this very short trip?

The building that collapsed from the earthquake was right next to the train station we got off at when we arrived in Bangkok last weekend. We took the train from Chiang Mai to Chatuchak 😮

Chase sends 8-digit 2fa SMS codes, which seems excessive compared to the 6 that most other places use, but even weirder is that the first digit of them has always been the same, effectively making it a 7 digit code. Anyone know what's up with that?

At long last, the OAuth working group has finished the Best Current Practice for OAuth 2.0 Security and it was just published as RFC9700! This has been a long time in the works, and I'm very thankful to everyone who has helped out with it over the years! www.rfc-editor.org/rfc/rfc9700....

Every now and then I remember how in 2014 I mined $20 worth of dogecoin, then said this is stupid and exchanged it for 0.05 bitcoin sent to a brainwallet. I can't remember the seed phrase, so it's just stuck in the blockchain, and is now worth $5000

I am still getting monthly emails saying I have a $0 balance from the tenant portal of the apartment we moved out of 18 months ago. Today I logged in to see if I can delete my account, but instead I see new maintenance requests from the last few months 😮

Goodbye Philips Hue 👋 I finally finished replacing all my Hue lights with Caseta switches. While I will miss the color temperature control, I am excited that I can attach a switch anywhere that works and looks just like a normal switch, no wires needed!

Just made eight weeks of waffles, going into the freezer now. Took almost 2 hours to cook the 8 batches. I should really get a second waffle iron cause it would literally halve the amount of time this takes.

We still don't have power from the street yet so in the mean time, I wired an Anker battery into the breaker panel to power all the lights in the house

It just occurred to me that YouTube is named after a completely obsolete technology

I really need to remember to put my phone on do not disturb when I'm doing electrical work. The buzz on my leg freaks me out every time ⚡️

The new iOS app icons dark mode is really messing with my brain. I can't recognize any of the icons at a glance anymore, it's like having to re-learn all the branding.

Just installed my first Lutron Caseta switch. Going to slowly convert all these switches over in the next few weeks. I do like how the switch is silent, no sound of a relay snapping.

I still highly recommend the Pilot Institute Part 107 course if you've been thinking about getting a drone pilot license! There's a good black friday deal on right now too! pilotinstitute.com/course/part-...

I've been digitizing old family VHS and 8mm tapes, and it's kind of incredible to think about how I can have a giant pile of tapes reduced to a single SD card. But also it's fun to find things like me playing piano at Nordstrom during the holidays.

Tonight was batch cooking night. Just made ~50 high-protein vegan waffles and then vacuum packed them. Five minutes in the air fryer is a nice quick breakfast later!

Well this was a first. Got to the airport and realized I was sitting at the gate in so much back pain that I cancelled my flight 10 minutes before boarding and went back home. The gate agents were confused about why my cancel request was so simple.

I have not owned a car my whole life, and consider myself a very confident bike commuter. Worked in bike shops, biked in dozens of countries. I feel like a n00b every time I try to research e-bikes. There is so much information, and so many new terms. Tell me what (budget) e-bike to get 😭

I should know better than to send an email asking if I should do "a or b", because of course the response was "yes please"

I don't want to speak too soon, but so far I slept a solid 8 hours last night and didn't get tired during the mid morning slump, so I think I may have avoided jet lag entirely this trip! #travel

Perfect weather forecast, I'll feel right at home here this week #dublin

I decided I would appreciate being home at 9:30am instead of 5pm more than I will be annoyed at having to wake up at 4:30am, so I changed my flight home to the early flight. Hope I don't oversleep! #travel

Good morning ✈️🌅

We got a blog post out summarizing our launch of OAuth for AT Protocol, and what work remains. This has been a huge project led by @matthieu.bsky.team with input from a bunch of standards folks and devs. Big milestone for building all sorts of clients, apps, and integrations on atproto.

Congrats to BlueSky for launching OAuth support for apps! 🙌 docs.bsky.app/blog/oauth-a...

Someone broke through the chain link fence last week, in broad daylight, while I was home, and didn't notice at the time. I started thinking about what I could do about it, and it turns out the EA Unifi cameras have a new webhook feature.

why am I always either drowning in lens wipes or can never find one??

Just posted another video of me working through my 100 songs to make them full length! This one involves cats 🐈 www.youtube.com/watch?v=J_Aw...

I've been finishing my 100 short 30-60-second songs by uploading them to an AI tool and having it extend them. So far I'm done with 60/100 songs! I also started making videos to document the process, and the first video is up! www.youtube.com/watch?v=88aD...

"I've always wanted to ride a Unixcycle" https://www.youtube.com/watch?v=TlwWSB-Y7w4

I've been using AI to extend my 100 Days of Music sketches into full length songs and it's been super fun! I upload the song I wrote and tell it to extend it, give it some guidance, then piece it back together in Logic Pro. I've finished 25 songs so far!

me: $30 is way too much for 16oz of vegan cheese mix! also me: **adds $60 of various powdered ingredients to a shopping cart in the hopes of recreating said cheese mix**

My new hobby is finding vegan mac and cheese sauce powder products online, and looking at the ingredient list and trying to recreate it

ok I think I just got my Home Assistant set up with Matter and Thread using the SkyConnect USB dongle and I have to say this is way more complicated than it should be and those names are terrible. I hope this gets smoothed out in the next couple years!

Tomorrow is the Bike Summer kickoff ride in Portland and I just submitted the airspace approval so I can fly a drone around the ride! Hoping to get a few good shots of bikes on bridges!

So #Identiverse is using an AI tool to summarize all the conference talks and it works about as terribly as you'd imagine. Nowhere in my talk did I say "OAuth 3.0", nor did I say anything about global privacy regulation compliance. It straight up hallucinated quotes from me. 🤦‍♂️

Well this is moving quickly! You can now spin up FedCM on your own website and log in to webmention.io thanks to this open source project from Sam Goto! This is so much better than having to type out your website or even email address when logging in!

Pro tip: if you file taxes in the US, go get yourself an IRS PIN so someone can't fraudulently file taxes using your SSN trying to get your tax refund deposited in their account. Ask me how I know.

I don't mean to brag, but

This weekend I built a prototype of using FedCM for IndieAuth! This gets rid of the need to enter your domain when logging in to websites using IndieAuth! Demo video and notes here: aaronparecki.com/2024/05/12/3...