RFC 8693
Preserves user and agent identity in one token
Episodes
-
#5463: What Happens When You Click "Connect" on an AI PluginYou click accept, the tool runs, and a credential you never saw is doing the work. Here's who actually owns it. -
#4733: Why OAuth Still Makes You Dance on Your Own MachineWhy does OAuth treat your personal computer like a public terminal? We explore token storage, PKCE, and Linux secret APIs.