Understanding OAuth: The Historical Requirements and Design Rationale
Wherein I [try to] answer a seemingly straightforward question: "WTF is OAuth, anyhow?"
Read the full articleYou might also wanna read
Why is OAuth still hard in 2026?
We implemented OAuth for the 50 most popular APIs. TL;DR: It is still a mess.

Demystifying OAuth grant types: a practical guide for developers
OAuth is a powerful authorization framework that has become the backbone of secure API access. It’s a cornerstone for security in the web wo
MCP Authentication & OAuth 2.1: Authorization Flows, Token Management, and Enterprise Security Patterns
A comprehensive guide to MCP authentication and authorization — covering the OAuth 2.1 spec evolution (March→June→November 2025), Protected
User-level vs org-level auth in API integrations
Whose credentials should your API integration use? The five identity models we see in production, and when to choose each one.

How Facebook's Design Regressed from Usability to Engagement-Driven Confusion
Facebook didn’t get worse overnight—it optimized itself into confusion. What started as the clearest social experience on the web slowly bec
Developer Documents Multi-Day AWS Lambda and X API OAuth Integration Battle
A software developer set out to build an autonomous AI-powered content engine on AWS that could generate and post Wizarding World-themed con

Comments
Sign in to join the conversation.
No comments yet. Be the first.