federation is easy to design and think of when you have OIDC built in, in this essay i will explain why ATProto
federation is hard to design and think of
October 31, 2026 at 8:58 AM
federation is easy to design and think of when you have OIDC built in, in this essay i will explain why ATProto
Dear Open Source projects that have an enterprise version to pay the bills: I understand the need - but making OIDC an enterprise feature is still an uncool move. #opensource
November 2, 2026 at 9:20 PM
Dear Open Source projects that have an enterprise version to pay the bills: I understand the need - but making OIDC an enterprise feature is still an uncool move. #opensource
If 12 years ago I had built OIDC into my initial draft of what became ActivityPub, it would have been 10% less fucked.
It would still be 80% fucked, mind.
It would still be 80% fucked, mind.
October 31, 2026 at 9:18 AM
If 12 years ago I had built OIDC into my initial draft of what became ActivityPub, it would have been 10% less fucked.
It would still be 80% fucked, mind.
It would still be 80% fucked, mind.
oidc is the thing that makes federation hard to think of
October 31, 2026 at 12:20 PM
oidc is the thing that makes federation hard to think of
Friendly reminder that OAuth and OIDC aren't the same thing, and the mix-up causes real bugs. OAuth is about authorization, what an app may do. OIDC is about authentication, who you are. Use an access token to prove identity and you've built a login that's easier to fool than it looks.
November 1, 2026 at 3:57 PM
Friendly reminder that OAuth and OIDC aren't the same thing, and the mix-up causes real bugs. OAuth is about authorization, what an app may do. OIDC is about authentication, who you are. Use an access token to prove identity and you've built a login that's easier to fool than it looks.
Terraform Weekly #294 - Stop minting secrets, start catching drift: Vault, OIDC, minimal-refresh, tfdrift in GitHub Security and WAF labels with tf-nag scans
www.weekly.tf/p/issue-294-...
www.weekly.tf/p/issue-294-...
Issue #294 - Stop minting secrets, start catching drift: Vault, OIDC, minimal-refresh, tfdrift in GitHub Security and WAF labels with tf-nag scans
A weekly newsletter about Terraform ecosystem (posts, tools, tips&tricks, open-source) with humble opinions by Anton Babenko.
www.weekly.tf
November 1, 2026 at 1:22 PM
Terraform Weekly #294 - Stop minting secrets, start catching drift: Vault, OIDC, minimal-refresh, tfdrift in GitHub Security and WAF labels with tf-nag scans
www.weekly.tf/p/issue-294-...
www.weekly.tf/p/issue-294-...
📦 tinect/oauth2-storefront-login 2.4.0
Adds OAuth2/OIDC login support to the Shopware 6 storefront (Microsoft, Google, GitHub, generic OIDC)
🔗 https://github.com/tinect/TinectOAuth2StorefrontLogin
Adds OAuth2/OIDC login support to the Shopware 6 storefront (Microsoft, Google, GitHub, generic OIDC)
🔗 https://github.com/tinect/TinectOAuth2StorefrontLogin
November 1, 2026 at 10:59 AM
📦 tinect/oauth2-storefront-login 2.4.0
Adds OAuth2/OIDC login support to the Shopware 6 storefront (Microsoft, Google, GitHub, generic OIDC)
🔗 https://github.com/tinect/TinectOAuth2StorefrontLogin
Adds OAuth2/OIDC login support to the Shopware 6 storefront (Microsoft, Google, GitHub, generic OIDC)
🔗 https://github.com/tinect/TinectOAuth2StorefrontLogin
"Keyless Deployments on AWS: Securing CI/CD with OpenID Connect (OIDC)" by Arda
#ci-cd #security #iam #github #deployment
#ci-cd #security #iam #github #deployment
Keyless Deployments on AWS: Securing CI/CD with OpenID Connect (OIDC)
A practical guide to securing CI/CD pipelines on AWS using OpenID Connect (OIDC): configure IAM Identity Providers, construct scoped trust policies, and implement keyless deployments in GitHub Actions.
community.aws
November 1, 2026 at 8:00 PM
Like, imagine platform-agnostic feeds that can recommend content according to their algorithms in varying lexicons and using the same moderation services (labellers) across different apps.
Also want to see a standard base profile record, which would enable OAuth improvements, FedCM & OIDC
Also want to see a standard base profile record, which would enable OAuth improvements, FedCM & OIDC
October 29, 2026 at 5:30 PM
Like, imagine platform-agnostic feeds that can recommend content according to their algorithms in varying lexicons and using the same moderation services (labellers) across different apps.
Also want to see a standard base profile record, which would enable OAuth improvements, FedCM & OIDC
Also want to see a standard base profile record, which would enable OAuth improvements, FedCM & OIDC
Vercel has given Marketplace vendors until January 2027 to offer safer authentication and says OIDC support for deployments is rolling out.
Vercel sets a deadline for vendors to move beyond long-lived keys
Vercel has given Marketplace vendors until January 2027 to offer safer authentication and says OIDC support for deployments is rolling out.
bit.ly
October 29, 2026 at 11:00 AM
Vercel has given Marketplace vendors until January 2027 to offer safer authentication and says OIDC support for deployments is rolling out.
is there anything like @danielroe.dev's uppt (github.com/danielroe/uppt) but for Rust/crates.io?
GitHub - danielroe/uppt: A composite GitHub Action that turns conventional commits into a draft release PR, tags the PR on merge, and stages publishing to npm via OIDC trusted publishing.
A composite GitHub Action that turns conventional commits into a draft release PR, tags the PR on merge, and stages publishing to npm via OIDC trusted publishing. - danielroe/uppt
github.com
October 29, 2026 at 8:19 PM
is there anything like @danielroe.dev's uppt (github.com/danielroe/uppt) but for Rust/crates.io?
⛑️ safety tip for Claude Platform API keys and local dev Instead of using an ANTHROPIC_API_KEY environment variable when developing locally, use the ant CLI and run `ant auth login`. The SDKs can pick up your ant OAuth creds (or WIF/OIDC) instead of an API key.
November 1, 2026 at 12:23 AM
⛑️ safety tip for Claude Platform API keys and local dev Instead of using an ANTHROPIC_API_KEY environment variable when developing locally, use the ant CLI and run `ant auth login`. The SDKs can pick up your ant OAuth creds (or WIF/OIDC) instead of an API key.
🟠 Neosantara is reporting a Partial Outage since 08:54 UTC
"Elevated Error Rates: Neosantara API (GET /oidc/authorize)"
Affects: Neosantara API, API
Live timeline → https://pingoru.io/providers/neosantara/incidents/12465963
#Neosantara #NeosantaraDown
"Elevated Error Rates: Neosantara API (GET /oidc/authorize)"
Affects: Neosantara API, API
Live timeline → https://pingoru.io/providers/neosantara/incidents/12465963
#Neosantara #NeosantaraDown
Neosantara: Elevated Error Rates: Neosantara API (GET /oidc/authorize) · November 3, 2026 · Pingoru
Neosantara incident on November 3, 2026: ### Current Status We are investigating elevated error rates on endpoint `GET /oidc/authorize`. ### Impact Requests to this endpoint may exp Started 8:54 AM UTC, resolved ongoing (● 10m). Affected: Neosantara API, Availability (API).
pingoru.io
November 3, 2026 at 9:04 AM
🟠 Neosantara is reporting a Partial Outage since 08:54 UTC
"Elevated Error Rates: Neosantara API (GET /oidc/authorize)"
Affects: Neosantara API, API
Live timeline → https://pingoru.io/providers/neosantara/incidents/12465963
#Neosantara #NeosantaraDown
"Elevated Error Rates: Neosantara API (GET /oidc/authorize)"
Affects: Neosantara API, API
Live timeline → https://pingoru.io/providers/neosantara/incidents/12465963
#Neosantara #NeosantaraDown
Amazon Quick desktop application now uses the same sign-in method as Quick on the web, eliminating the need for separate OIDC configuration.
Amazon Quick on desktop now uses your organization's existing Amazon Quick sign-in
Amazon Quick desktop application now uses the same sign-in method as Quick on the web, eliminating the need for separate OIDC configuration.
aws-news.com
November 2, 2026 at 6:50 PM
Amazon Quick desktop application now uses the same sign-in method as Quick on the web, eliminating the need for separate OIDC configuration.
Yep agreed. This is a classic OIDC use case @erlend.sh - there’s some other nuances from some of the work that bsky has with login with atmosphere to do cross website session persistence that MAY fit in, but that’s not fully baked or public yet.
October 31, 2026 at 5:16 PM
Yep agreed. This is a classic OIDC use case @erlend.sh - there’s some other nuances from some of the work that bsky has with login with atmosphere to do cross website session persistence that MAY fit in, but that’s not fully baked or public yet.
📢 New #updates · 2 Nov #7.3
· Wekan v12.78 — SAML logins and export fixes
· windmill v1.856.0 — OIDC tokens, Vault secrets, and CLI role sync
· Wekan v12.78 — SAML logins and export fixes
· windmill v1.856.0 — OIDC tokens, Vault secrets, and CLI role sync
November 2, 2026 at 9:05 AM
📢 New #updates · 2 Nov #7.3
· Wekan v12.78 — SAML logins and export fixes
· windmill v1.856.0 — OIDC tokens, Vault secrets, and CLI role sync
· Wekan v12.78 — SAML logins and export fixes
· windmill v1.856.0 — OIDC tokens, Vault secrets, and CLI role sync
Deploying Terraform to AWS with GitHub Actions and OIDC
A practical guide to Dev, Stage and Production deployments, plan reviews and temporary AWS access.
Read the full article on my blog:
https://blog.turingts.com/deploying-terraform-to-aws-with-github-actions-and-oidc
A practical guide to Dev, Stage and Production deployments, plan reviews and temporary AWS access.
Read the full article on my blog:
https://blog.turingts.com/deploying-terraform-to-aws-with-github-actions-and-oidc
Deploying Terraform to AWS with GitHub Actions and OIDC
A practical guide to Terraform deployments, separate environments, plan reviews and temporary AWS access with GitHub Actions and OIDC.
blog.turingts.com
October 30, 2026 at 8:20 PM
Deploying Terraform to AWS with GitHub Actions and OIDC
A practical guide to Dev, Stage and Production deployments, plan reviews and temporary AWS access.
Read the full article on my blog:
https://blog.turingts.com/deploying-terraform-to-aws-with-github-actions-and-oidc
A practical guide to Dev, Stage and Production deployments, plan reviews and temporary AWS access.
Read the full article on my blog:
https://blog.turingts.com/deploying-terraform-to-aws-with-github-actions-and-oidc
"Secure AWS Automation with GitHub Actions and OpenID Connect (OIDC)" by Narendra Sivangula
#iam #security #devops #serverless
#iam #security #devops #serverless
Secure AWS Automation with GitHub Actions and OpenID Connect (OIDC)
Learn how to securely connect GitHub Actions to AWS without storing long-lived access keys. This practical guide explores OpenID Connect (OIDC), AWS IAM trust policies, AWS STS, temporary credentials, and least-privilege access using Terraform and GitHub Actions.
community.aws
October 31, 2026 at 2:30 PM
"Secure AWS Automation with GitHub Actions and OpenID Connect (OIDC)" by Narendra Sivangula
#iam #security #devops #serverless
#iam #security #devops #serverless
attesto_phoenix 4.4.0 [updated]
Phoenix/Ecto OAuth 2.0 / OIDC authorization server layer over attesto: authorization, token, PAR, revocation, discovery, JWKS, UserInfo, protected-resource ⋯
Licenses: MIT
Phoenix/Ecto OAuth 2.0 / OIDC authorization server layer over attesto: authorization, token, PAR, revocation, discovery, JWKS, UserInfo, protected-resource ⋯
Licenses: MIT
November 2, 2026 at 12:00 AM
attesto_phoenix 4.4.0 [updated]
Phoenix/Ecto OAuth 2.0 / OIDC authorization server layer over attesto: authorization, token, PAR, revocation, discovery, JWKS, UserInfo, protected-resource ⋯
Licenses: MIT
Phoenix/Ecto OAuth 2.0 / OIDC authorization server layer over attesto: authorization, token, PAR, revocation, discovery, JWKS, UserInfo, protected-resource ⋯
Licenses: MIT
https://lckhd.eu/gdCj09
#WorkloadIdentity #SPIFFE #OIDC #Agents #DevSecOps
It isn’t always clear what cloud credentials are used when a CI/CD pipeline sets up an agent. Does the agent run with some specific person’s credentials, or is something created just for it? Security should be top of mind
#WorkloadIdentity #SPIFFE #OIDC #Agents #DevSecOps
It isn’t always clear what cloud credentials are used when a CI/CD pipeline sets up an agent. Does the agent run with some specific person’s credentials, or is something created just for it? Security should be top of mind
November 1, 2026 at 5:30 AM
https://lckhd.eu/gdCj09
#WorkloadIdentity #SPIFFE #OIDC #Agents #DevSecOps
It isn’t always clear what cloud credentials are used when a CI/CD pipeline sets up an agent. Does the agent run with some specific person’s credentials, or is something created just for it? Security should be top of mind
#WorkloadIdentity #SPIFFE #OIDC #Agents #DevSecOps
It isn’t always clear what cloud credentials are used when a CI/CD pipeline sets up an agent. Does the agent run with some specific person’s credentials, or is something created just for it? Security should be top of mind
How to enable GitHub Actions' immutable subject claims for OIDC and Azure by @jessehouwing.net
https://jessehouwing.net/how-to-enable-immutable-subject-claims-for-oidc-and-azure/?utm_source=bluesky&utm_medium=social&utm_campaign=newsletter
https://jessehouwing.net/how-to-enable-immutable-subject-claims-for-oidc-and-azure/?utm_source=bluesky&utm_medium=social&utm_campaign=newsletter
How to enable GitHub Actions' immutable subject claims for OIDC and Azure by @jessehouwing.net
You may have read previous posts where I documented my attempts to get rid of Personal Access Tokens, Client Certificates and other permanent secrets. And if so, you're likely at least somewhat familiar with OIDC.
jessehouwing.net
October 30, 2026 at 10:50 PM
How to enable GitHub Actions' immutable subject claims for OIDC and Azure by @jessehouwing.net
https://jessehouwing.net/how-to-enable-immutable-subject-claims-for-oidc-and-azure/?utm_source=bluesky&utm_medium=social&utm_campaign=newsletter
https://jessehouwing.net/how-to-enable-immutable-subject-claims-for-oidc-and-azure/?utm_source=bluesky&utm_medium=social&utm_campaign=newsletter
The OIDC angle is solid, but has anyone actually measured the operational lift of rotating those bindings vs. the security gain? Feels like it trades one problem for another.
November 2, 2026 at 3:37 PM
The OIDC angle is solid, but has anyone actually measured the operational lift of rotating those bindings vs. the security gain? Feels like it trades one problem for another.