🚀 Released league/oauth2-server-bundle v1.2.3 and v2.0.0, the #Symfony integration for league/oauth2-server library.
Mostly leveraging #PHP, Symfony, and oauth2-server's latest syntax and features.
Shoutout to @ajgarlag.bsky.social for his great maintenance work 🤝
github.com/thephpleague...
Mostly leveraging #PHP, Symfony, and oauth2-server's latest syntax and features.
Shoutout to @ajgarlag.bsky.social for his great maintenance work 🤝
github.com/thephpleague...
Release v2.0.0 · thephpleague/oauth2-server-bundle
What's Changed
Bump required dependencies for v2.0 by @chalasr in #294
Remove 1.x backward compatibility layer by @ajgarlag in #291
Bump development dependencies by @ajgarlag in #313
Full Changel...
github.com
November 2, 2026 at 1:07 PM
🚀 Released league/oauth2-server-bundle v1.2.3 and v2.0.0, the #Symfony integration for league/oauth2-server library.
Mostly leveraging #PHP, Symfony, and oauth2-server's latest syntax and features.
Shoutout to @ajgarlag.bsky.social for his great maintenance work 🤝
github.com/thephpleague...
Mostly leveraging #PHP, Symfony, and oauth2-server's latest syntax and features.
Shoutout to @ajgarlag.bsky.social for his great maintenance work 🤝
github.com/thephpleague...
Slowly patching all of the OAuth2/OpenID Connect clients in my k8s cluster to use RFC7523 JWT Bearer client auth with a projected service account token for auth as part of my mission to eliminate all long lived bearer secrets ( ˘ω˘ )
November 1, 2026 at 9:45 PM
Slowly patching all of the OAuth2/OpenID Connect clients in my k8s cluster to use RFC7523 JWT Bearer client auth with a projected service account token for auth as part of my mission to eliminate all long lived bearer secrets ( ˘ω˘ )
Gitea 28.3 arrives with 20 security fixes, addressing token permission enforcement and an OAuth2 account takeover issue in specific open registration setups.
https://en.hacks.gr/i-gitea-kykloforei-nea-ekdosi-poy-diorthonei-eikosi-provlimata-asfaleias/
#Gitea #OAuth2 #OpenSource
https://en.hacks.gr/i-gitea-kykloforei-nea-ekdosi-poy-diorthonei-eikosi-provlimata-asfaleias/
#Gitea #OAuth2 #OpenSource
November 1, 2026 at 3:16 PM
Gitea 28.3 arrives with 20 security fixes, addressing token permission enforcement and an OAuth2 account takeover issue in specific open registration setups.
https://en.hacks.gr/i-gitea-kykloforei-nea-ekdosi-poy-diorthonei-eikosi-provlimata-asfaleias/
#Gitea #OAuth2 #OpenSource
https://en.hacks.gr/i-gitea-kykloforei-nea-ekdosi-poy-diorthonei-eikosi-provlimata-asfaleias/
#Gitea #OAuth2 #OpenSource
Blog post: www.zaproxy.org/blog/2026-11...
OAuth2 support has landed in the Authentication Helper, the Browser Extension has a new Script Viewer, ZAP can detect PHP2Shell, and we explain how we’re developing ZAP in the LLM age.
#zaproxy #appsec
OAuth2 support has landed in the Authentication Helper, the Browser Extension has a new Script Viewer, ZAP can detect PHP2Shell, and we explain how we’re developing ZAP in the LLM age.
#zaproxy #appsec
ZAP Updates - October 2026
OAuth2 support has landed in the Authentication Helper, the Browser Extension has a new Script Viewer, ZAP can detect PHP2Shell, and we explain how we’re developing ZAP in the LLM age.
www.zaproxy.org
November 2, 2026 at 12:46 PM
Blog post: www.zaproxy.org/blog/2026-11...
OAuth2 support has landed in the Authentication Helper, the Browser Extension has a new Script Viewer, ZAP can detect PHP2Shell, and we explain how we’re developing ZAP in the LLM age.
#zaproxy #appsec
OAuth2 support has landed in the Authentication Helper, the Browser Extension has a new Script Viewer, ZAP can detect PHP2Shell, and we explain how we’re developing ZAP in the LLM age.
#zaproxy #appsec
New Post from Stack Overflow Blog!
"Oh, your agents need OAuth2, too"
https://stackoverflow.blog/2026/11/03/oh-your-agents-need-oauth2-too/
"Oh, your agents need OAuth2, too"
https://stackoverflow.blog/2026/11/03/oh-your-agents-need-oauth2-too/
November 3, 2026 at 12:00 PM
New Post from Stack Overflow Blog!
"Oh, your agents need OAuth2, too"
https://stackoverflow.blog/2026/11/03/oh-your-agents-need-oauth2-too/
"Oh, your agents need OAuth2, too"
https://stackoverflow.blog/2026/11/03/oh-your-agents-need-oauth2-too/
New Post from Stack Overflow Blog!
"Oh, your agents need OAuth2, too"
https://stackoverflow.blog/2026/11/03/oh-your-agents-need-oauth2-too/
"Oh, your agents need OAuth2, too"
https://stackoverflow.blog/2026/11/03/oh-your-agents-need-oauth2-too/
November 3, 2026 at 8:00 AM
New Post from Stack Overflow Blog!
"Oh, your agents need OAuth2, too"
https://stackoverflow.blog/2026/11/03/oh-your-agents-need-oauth2-too/
"Oh, your agents need OAuth2, too"
https://stackoverflow.blog/2026/11/03/oh-your-agents-need-oauth2-too/
Sign in with Muse is READY.
No password per site. No phone number per site. Your Muse approves, and you're in.
https://github.com/Git-FED/MuseAi-OAuth2
www.fedpromptly.com
5F2V31
No password per site. No phone number per site. Your Muse approves, and you're in.
https://github.com/Git-FED/MuseAi-OAuth2
www.fedpromptly.com
5F2V31
November 1, 2026 at 7:17 PM
Sign in with Muse is READY.
No password per site. No phone number per site. Your Muse approves, and you're in.
https://github.com/Git-FED/MuseAi-OAuth2
www.fedpromptly.com
5F2V31
No password per site. No phone number per site. Your Muse approves, and you're in.
https://github.com/Git-FED/MuseAi-OAuth2
www.fedpromptly.com
5F2V31
📦 staxxer/oauth2-moneybird 2.0.0
Moneybird OAuth 2.0 Client Provider for The PHP League OAuth2-Client
🔗 https://github.com/marketphase/oauth2-moneybird
Moneybird OAuth 2.0 Client Provider for The PHP League OAuth2-Client
🔗 https://github.com/marketphase/oauth2-moneybird
October 31, 2026 at 12:59 AM
📦 staxxer/oauth2-moneybird 2.0.0
Moneybird OAuth 2.0 Client Provider for The PHP League OAuth2-Client
🔗 https://github.com/marketphase/oauth2-moneybird
Moneybird OAuth 2.0 Client Provider for The PHP League OAuth2-Client
🔗 https://github.com/marketphase/oauth2-moneybird
📦 tinect/oauth2-storefront-login 2.4.0
Adds OAuth2/OIDC login support to the Shopware 6 storefront (Microsoft, Google, GitHub, generic OIDC)
🔗 https://github.com/tinect/TinectOAuth2StorefrontLogin
Adds OAuth2/OIDC login support to the Shopware 6 storefront (Microsoft, Google, GitHub, generic OIDC)
🔗 https://github.com/tinect/TinectOAuth2StorefrontLogin
November 1, 2026 at 10:59 AM
📦 tinect/oauth2-storefront-login 2.4.0
Adds OAuth2/OIDC login support to the Shopware 6 storefront (Microsoft, Google, GitHub, generic OIDC)
🔗 https://github.com/tinect/TinectOAuth2StorefrontLogin
Adds OAuth2/OIDC login support to the Shopware 6 storefront (Microsoft, Google, GitHub, generic OIDC)
🔗 https://github.com/tinect/TinectOAuth2StorefrontLogin
Security advisories 18/23
Gitea 28.3.0 fixes 20 flaws, from account takeover to leaked secrets
Seven are rated high, including an account takeover through OAuth2 auto-linking and fork workflows that receive repository secrets.
#infosec #cybersecurity
trustlist.uk/security-advisorie…
Gitea 28.3.0 fixes 20 flaws, from account takeover to leaked secrets
Seven are rated high, including an account takeover through OAuth2 auto-linking and fork workflows that receive repository secrets.
#infosec #cybersecurity
trustlist.uk/security-advisorie…
Gitea 28.3.0 fixes 20 flaws, from account takeover to leaked secrets
Seven are rated high, including an account takeover through OAuth2 auto-linking and fork workflows that receive repository secrets. Every release up to 28.2.0 is affected; there is no backport line.
trustlist.uk
November 2, 2026 at 7:51 PM
Security advisories 18/23
Gitea 28.3.0 fixes 20 flaws, from account takeover to leaked secrets
Seven are rated high, including an account takeover through OAuth2 auto-linking and fork workflows that receive repository secrets.
#infosec #cybersecurity
trustlist.uk/security-advisorie…
Gitea 28.3.0 fixes 20 flaws, from account takeover to leaked secrets
Seven are rated high, including an account takeover through OAuth2 auto-linking and fork workflows that receive repository secrets.
#infosec #cybersecurity
trustlist.uk/security-advisorie…
I use this: cleanfollow-bsky.pages.dev
This website is bugged, it just takes your handle not your password
It uses oauth2 to sign in
This website is bugged, it just takes your handle not your password
It uses oauth2 to sign in
cleanfollow-bsky
Unfollow blocked, deleted, suspended, and deactivated Bluesky accounts
cleanfollow-bsky.pages.dev
November 1, 2026 at 10:49 PM
I use this: cleanfollow-bsky.pages.dev
This website is bugged, it just takes your handle not your password
It uses oauth2 to sign in
This website is bugged, it just takes your handle not your password
It uses oauth2 to sign in
📦 tualo/oauth2 0.1.1
OAuth 2.0 and OpenID Connect authorization server for Tualo Office
🔗 https://github.com/tualo/oauth2
OAuth 2.0 and OpenID Connect authorization server for Tualo Office
🔗 https://github.com/tualo/oauth2
October 30, 2026 at 10:00 PM
📦 tualo/oauth2 0.1.1
OAuth 2.0 and OpenID Connect authorization server for Tualo Office
🔗 https://github.com/tualo/oauth2
OAuth 2.0 and OpenID Connect authorization server for Tualo Office
🔗 https://github.com/tualo/oauth2
📦 socialiteproviders/lifesciencelogin 6.1.1
Life Science Login OAuth2 Provider for Laravel Socialite
🔗 https://github.com/SocialiteProviders/LifeScienceLogin
Life Science Login OAuth2 Provider for Laravel Socialite
🔗 https://github.com/SocialiteProviders/LifeScienceLogin
November 2, 2026 at 5:16 AM
📦 socialiteproviders/lifesciencelogin 6.1.1
Life Science Login OAuth2 Provider for Laravel Socialite
🔗 https://github.com/SocialiteProviders/LifeScienceLogin
Life Science Login OAuth2 Provider for Laravel Socialite
🔗 https://github.com/SocialiteProviders/LifeScienceLogin
OAuth2's authorization protocol carries 6 CVEs, 2 critical at max CVSS 9.1. Trust score B, but 16% unpatched and auth bypass flaws (CWE-290) hit hard. Audit your flows. #cybersecurity #infosec #oauth https://www.valtersit.com/vendors/oauth2/
Oauth2
www.valtersit.com
October 30, 2026 at 1:50 PM
OAuth2's authorization protocol carries 6 CVEs, 2 critical at max CVSS 9.1. Trust score B, but 16% unpatched and auth bypass flaws (CWE-290) hit hard. Audit your flows. #cybersecurity #infosec #oauth https://www.valtersit.com/vendors/oauth2/
OAuth2 token fetcher and refresher in 213 lines of Python. Handles token expiry and refresh for Google, GitHub, Slack or internal APIs. Intermediate level, uses authlib and requests. https://www.valtersit.com/python/oauth2-token-fetcher-and-refresher/
OAuth2 Token Fetcher and Refresher
www.valtersit.com
October 30, 2026 at 2:50 AM
OAuth2 token fetcher and refresher in 213 lines of Python. Handles token expiry and refresh for Google, GitHub, Slack or internal APIs. Intermediate level, uses authlib and requests. https://www.valtersit.com/python/oauth2-token-fetcher-and-refresher/
Sunsetting the OAuth2 integration entrypoint
With the introduction of the, the OAuth2 entrypoint is being sunset. Integrations using the OAuth2 entrypoint have until to migrate to installation flow to avoid any disruptions.API ScopesExternal modeDecember 31, 2022…
https://changeradar.ai/tools/v0
With the introduction of the, the OAuth2 entrypoint is being sunset. Integrations using the OAuth2 entrypoint have until to migrate to installation flow to avoid any disruptions.API ScopesExternal modeDecember 31, 2022…
https://changeradar.ai/tools/v0
October 29, 2026 at 12:03 PM
Sunsetting the OAuth2 integration entrypoint
With the introduction of the, the OAuth2 entrypoint is being sunset. Integrations using the OAuth2 entrypoint have until to migrate to installation flow to avoid any disruptions.API ScopesExternal modeDecember 31, 2022…
https://changeradar.ai/tools/v0
With the introduction of the, the OAuth2 entrypoint is being sunset. Integrations using the OAuth2 entrypoint have until to migrate to installation flow to avoid any disruptions.API ScopesExternal modeDecember 31, 2022…
https://changeradar.ai/tools/v0
CVE-2026-120263 - Gitea OAuth2 account auto-linking takeover through the sign-up form
CVE ID : CVE-2026-120263
Published : Nov. 1, 2026, 10:18 a.m. | 1 hour, 15 minutes ago
Description : When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and regist...
CVE ID : CVE-2026-120263
Published : Nov. 1, 2026, 10:18 a.m. | 1 hour, 15 minutes ago
Description : When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and regist...
CVE-2026-120263 - Gitea OAuth2 account auto-linking takeover through the sign-up form
When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and registration is enabled, the link-account sign-up form looked up the existing account to link by the user name or email submitted in the form instead of the identity asserted by the OAuth2 provider. An attacker with an account on a …
cvefeed.io
November 1, 2026 at 11:50 AM
CVE-2026-120263 - Gitea OAuth2 account auto-linking takeover through the sign-up form
CVE ID : CVE-2026-120263
Published : Nov. 1, 2026, 10:18 a.m. | 1 hour, 15 minutes ago
Description : When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and regist...
CVE ID : CVE-2026-120263
Published : Nov. 1, 2026, 10:18 a.m. | 1 hour, 15 minutes ago
Description : When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and regist...
🚨 EUVD-2026-113684
📊 n/a
🏢 Drupal
📝 Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 Token Manager versions: from 0.0.0 to...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113684
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Drupal
📝 Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 Token Manager versions: from 0.0.0 to...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113684
#cybersecurity #infosec #cve #euvd
October 30, 2026 at 7:03 AM
🚨 EUVD-2026-113684
📊 n/a
🏢 Drupal
📝 Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 Token Manager versions: from 0.0.0 to...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113684
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Drupal
📝 Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 Token Manager versions: from 0.0.0 to...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113684
#cybersecurity #infosec #cve #euvd
I've also considered giving up on #atproto and offer OIDC or OAUTH2 for the usual suspects - but that would kill the publishing feature.
October 31, 2026 at 9:01 AM
I've also considered giving up on #atproto and offer OIDC or OAUTH2 for the usual suspects - but that would kill the publishing feature.
📦 maytes/api-client-php v0.1.7
Official PHP client for the Maytes API — create, capture and cancel checkouts, with OAuth2 token management and webhook signature verification.
🔗 https://github.com/kttipay/maytes-api-client-php
Official PHP client for the Maytes API — create, capture and cancel checkouts, with OAuth2 token management and webhook signature verification.
🔗 https://github.com/kttipay/maytes-api-client-php
November 2, 2026 at 12:59 AM
📦 maytes/api-client-php v0.1.7
Official PHP client for the Maytes API — create, capture and cancel checkouts, with OAuth2 token management and webhook signature verification.
🔗 https://github.com/kttipay/maytes-api-client-php
Official PHP client for the Maytes API — create, capture and cancel checkouts, with OAuth2 token management and webhook signature verification.
🔗 https://github.com/kttipay/maytes-api-client-php
📦 blackcube/oauth2 1.0.1
OAuth2/JWT toolbox with multi-population support
🔗 https://github.com/blackcubeio/oauth2
OAuth2/JWT toolbox with multi-population support
🔗 https://github.com/blackcubeio/oauth2
October 27, 2026 at 3:01 PM
📦 blackcube/oauth2 1.0.1
OAuth2/JWT toolbox with multi-population support
🔗 https://github.com/blackcubeio/oauth2
OAuth2/JWT toolbox with multi-population support
🔗 https://github.com/blackcubeio/oauth2
Discordサーバーでヘルスケアログができる #Discordアプリ を作りました。
こちらからインストールできます▶ discord.com/oauth2/autho...
「/add」コマンド送信だけで、「こころ」と「からだ」の記録を簡単に入力できます。
全項目が任意なので、未入力でも大丈夫🙆♀️
わたしは家族と共有する目的で使います☺️
こちらからインストールできます▶ discord.com/oauth2/autho...
「/add」コマンド送信だけで、「こころ」と「からだ」の記録を簡単に入力できます。
全項目が任意なので、未入力でも大丈夫🙆♀️
わたしは家族と共有する目的で使います☺️
October 31, 2026 at 12:00 PM
Discordサーバーでヘルスケアログができる #Discordアプリ を作りました。
こちらからインストールできます▶ discord.com/oauth2/autho...
「/add」コマンド送信だけで、「こころ」と「からだ」の記録を簡単に入力できます。
全項目が任意なので、未入力でも大丈夫🙆♀️
わたしは家族と共有する目的で使います☺️
こちらからインストールできます▶ discord.com/oauth2/autho...
「/add」コマンド送信だけで、「こころ」と「からだ」の記録を簡単に入力できます。
全項目が任意なので、未入力でも大丈夫🙆♀️
わたしは家族と共有する目的で使います☺️