Tag

#oauth

4 posts

AI & Machine LearningOctober 6, 202617 min
MCP Token Audience Check: expectedResource Tested (2026)
I tested the MCP TypeScript SDK's new expectedResource option for token audience validation. It is off by default and Express adapter 2.0.1 ignores it (2026).
LLM & IntegrationJuly 14, 202614 min
MCP Goes Stateless: The 2026-07-28 Spec Explained
MCP's July 28, 2026 spec goes stateless and ships Enterprise-Managed Authorization. Here's what changes, what breaks, and new security risks to plan for.
AI & Machine LearningMay 14, 202619 min
MCP Server in TypeScript: OAuth 2.1 + Streamable HTTP (2026)
Build a production MCP server in TypeScript with OAuth 2.1, RFC 8707 resource indicators, Streamable HTTP, and scope-aware tool authorization in 2026.
Security & PrivacyJanuary 15, 20239 min
OAuth Explained: Secure, Reliable Auth
OAuth 2.0 + OpenID Connect for real apps: authorization code flow with PKCE, refresh tokens, scopes, and the common traps that ship to production.

Every post in #oauth (4)

MCP Token Audience Check: expectedResource Tested (2026)