/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 cloudentity.com
Private Key JWT Client Authentication
| | blog.christianposta.com
Authenticating MCP OAuth Clients With SPIFFE and SPIRE - ceposta Technology Blog
1.8 parsecs away

Travel
| | In the previous blog, we dug into dynamically registering OAuth clients leveraging SPIFFE and SPIRE. We used SPIRE to issue software statements in the SPIFFE JWT SVID that Keycloak can trust as part of Dynamic Client Registration (RFC 7591). Once we have an OAuth client, we will want to continue to use SPIFFE to authenticate to our Authorization Server. This eliminates the need for a long-lived "client secret" which is common for Confidential OAuth. This means we can use the Agent or MCP client's identity (based on SPIFFE) for authorization flows based on OAuth. We dig into that in this blog.
| | mydeveloperplanet.com
Setup OpenID Connect with Keycloak: A Step-by-Step Guide
2.7 parsecs away

Travel
| | This blog provides comprehensive guidance on setting up the OpenID Connect Authorization Code Flow using Keycloak. It explains key concepts, prerequisites, and step-by-step instructions to create realms, clients, and users. The blog emphasizes understanding OAuth2.0 and OIDC, concluding with the implementation of the Authorization Code Flow in applications.
| | gist.github.com
Script which access the Jamf Pro API and uses provided API client authentication to obtain and verify bearer tokens ยท GitHub
2.4 parsecs away

Travel
| | Script which access the Jamf Pro API and uses provided API client authentication to obtain and verify bearer tokens - jamf_pro_api_client_token_management.sh
| | nat.sakimura.org
Write an OpenID Connect server in three simple steps - .Nat Zone
14.4 parsecs away

Travel
| An OpenID Connect server is just an OAuth 2.0 server on steroids. What it does it to return the ID Token, which contains information about the authentication event for the user at the door, in