Client ID Metadata Documents (CIMD): OAuth Client Identification Using URLs
By
mooreds
Hand-rolled, kettle-boiled, baked to perfection. Worth every minute at the bakery.
Summary
Client ID Metadata Documents (CIMD) is a new OAuth approach that allows clients to identify themselves using URLs instead of requiring pre-registration. Clients host a JSON metadata document at an HTTPS URL and use that URL as their client_id, eliminating the need for manual registration with authorization servers. This reduces friction, supports dynamic ecosystems like MCP (Model Context Protocol), and solves interoperability issues in OAuth implementations.
Key quotes
· 4 pulledClient ID Metadata Documents (CIMD) let OAuth clients identify themselves using a URL. No preregistration necessary.
CIMD reduces friction, supports dynamic ecosystems like MCP, and eliminates interoperability headaches.
Instead of a pre-registered client ID, the client uses the URL where their metadata is hosted as their client_id.
The client creates a JSON document with their metadata and hosts it at an HTTPS URL.
You might also wanna read
Technical Insights from Building Passkeybot: Lessons on Passkey Implementation and WebAuthn
The article shares insights from building passkeybot.com, a hosted sign-in page that enables passkey authentication for websites. It explain
WebSparks: An AI-Powered Tool for Building Web Applications Without Extensive Coding
WebSparks is an AI-powered software engineer that transforms ideas into fully functional web applications without requiring extensive coding
innovirtuoso.com·23h agoJoost de Valk publishes open Website Specification: 128 rules for modern, future-proof websites
Joost de Valk, creator of Yoast SEO, published the Website Specification (specification.website) — an open, platform-agnostic reference docu
ZX Spectrum BASIC interpreter rebuilt from scratch to run natively in web browsers
A developer has rebuilt the ZX Spectrum's BASIC interpreter from scratch to run in a web browser, without emulating the original Z80 hardwar
How to Set Up an Apache Reverse Proxy for an Ecommerce Website
This article provides a comprehensive, start-to-finish guide on setting up an Apache reverse proxy specifically for ecommerce websites. It c
blog.radwebhosting.com·2d agoImplementing live text search in React with Firestore Enterprise's built-in search pipeline
Firebase's Firestore Enterprise edition now includes built-in text search support. This article demonstrates how to implement live text sear
firebase.blog·2d ago