Skip to content
Standard Reader
Log in
Tag

Authentication

Articles and publications tagged Authentication across the Atmosphere.

26articles12publications
ewan's devlog
ewan's devlogJun 6, 2026
Malachite: ATProto OAuth CLI and did:web Support
Malachite gains OAuth-based CLI authentication for ATProto and did:web DID resolution, alongside a restructured web frontend.
malachiteatproto
Games At Work dot Biz
Games At Work dot BizMay 25, 2026
e555 — One Two, One Two
Photo by Michael Martine: The Bean in Millennium Park, Chicago, IL, June 2019 Published 25 May 2026 e555 with Andy, Michael and Michael - Ploopy’s The Bean and Lenovo’s TrackPoint, The Guild, The Movie, AI in commencement speeches, AI in podcasts, Virtual Worlds and Virtual OS museums and a whole lot more! Andy, Michael and...
1
aiAI podcast slop
We Can Just Do Things
We Can Just Do ThingsMay 15, 2026
The Atmosphere needs a front door
The Atmosphere needs a distinct brand identify, better tools for builders, a new UX for users, and a small empowered group willing to build it all.
23
atmosphereuser experience
subaud
subaudApr 3, 2026
Adding OAuth to an MCP Server: From API Keys to Browser Login
MixCraft started with static API keys—generate one from the web portal, paste it into your Claude Code config. The mx_ prefixed keys had no expiration, lived in shell history and dotfiles, and revoking one meant generating a new key and updating every client. Service tokens from third-party APIs expired after an hour with no refresh mechanism, so users would get silent failures mid-session. I needed to replace the whole auth model with OAuth. But worse, it didn't work well with claude.ai because
MCPOAuth
Andrew Lilley Brinker
Andrew Lilley BrinkerJan 14, 2026
Passkey PRFs and the Passkey Loss Blast Radius
Exploring the way passkey PRFs increase the blast radius of
Authentication
Nick's Blog
Nick's BlogDec 17, 2025
Sign In With Your Internet Handle
3
atprotocolauthentication
Den Delimarsky
Den DelimarskyNov 24, 2025
What's New In The 2025-11-25 MCP Authorization Spec
Preview of authorization changes landing in the 2025-11-25 MCP spec release, marking the protocol's first anniversary with notable auth-flow updates.
mcpauthentication
Devtools FM
Devtools FMAug 10, 2025
Bereket Engida - Better-Auth
Bereket Engida walks through building better-auth, the extensible authentication library taking the JavaScript community by storm.
better-authauthentication
Den Delimarsky
Den DelimarskyJul 7, 2025
OAuth In The MCP C# SDK: Simple, Secure, Standard
Walkthrough of the new OAuth 2.0 and RFC 9728 PRM support shipped in the official MCP C# SDK, with sample code for protected MCP server authorization in .NET.
mcpauthentication
Den Delimarsky
Den DelimarskyApr 21, 2025
Better Logic For Showing Auth Windows With Your Local MCP Server
Parent WAM authentication dialogs to MCP clients like VS Code and Claude Desktop by traversing the process hierarchy to find a usable window handle.
mcpai
Den Delimarsky
Den DelimarskyApr 14, 2025
Enable Local MCP Servers To Access Entra ID Accounts
C# walkthrough using MSAL with Windows Web Account Manager (WAM) so a local MCP server can sign users into Entra ID without standing up an OAuth listener.
aimcp
Den Delimarsky
Den DelimarskyApr 9, 2025
Old Security Rakes In New MCP Yards
MCP brings back classic security problems around local execution and remote authentication, and the industry seems determined to ignore lessons already learned.
aimcp
edafe.de
edafe.deDec 21, 2024
Can passkeys replace passwords
"Passkeys and the WebAuthn specification were intended to make public key cryptography accessible to average users, rather than just the domain of the tech-savvy. If done right, they could seriously improve security on the Web." @drbruced@aus.social summarises why passkeys are such a good idea in theory and explains where current implementations of the technology fall...
authenticationcryptography
Den Delimarsky
Den DelimarskyNov 22, 2024
Deceiving Authenticator Apps On Apple And Google Devices
App Store and Play Store ads routinely surface look-alike authenticator apps above the legitimate ones. Here is how to spot and avoid them.
authenticationmobile
Den Delimarsky
Den DelimarskyApr 15, 2024
Simpler MSAL Logins With The Windows Auth Broker
Use the Windows Web Account Manager (WAM) broker with MSAL to delegate OAuth token acquisition to the OS and skip redirect URL plumbing in client apps.
msalsecurity
edafe.de
edafe.deJan 11, 2024
A hacker’s perspective: social media account takeover prevention guide
"If you watched the SEC Twitter account hack that moved markets yesterday and wondered how to prevent account takeover for your personal, business, or high profile social media account, here's an Account Takeover Prevention Guide for you and/or your organization." @racheltobac@infosec.exchange neatly summarises the steps you should take to prevent the hijacking of your online accounts.
2faauthentication
Den Delimarsky
Den DelimarskyDec 8, 2023
Sending Your MSAL Telemetry To Azure Application Insights
Wiring MSAL.NET 4.58.0 OpenTelemetry support to the Azure Monitor exporter so authentication metrics from production apps land in Application Insights.
msalauthentication
Den Delimarsky
Den DelimarskyMar 28, 2023
Docs As Part Of The Developer Experience For MSAL
How the MSAL team approaches developer-facing documentation - making engineers core contributors, not delegating writing to a separate content org.
msalauthentication
Den Delimarsky
Den DelimarskyDec 29, 2021
First Explorations of Twitter Verification API
Tracing the network calls behind Twitter's relaunched verification eligibility check, revealing the internal API the new self-service flow relies on.
twitterengineering
Den Delimarsky
Den DelimarskyFeb 24, 2018
It Is Time To Ditch SMS 2-Factor Verification
Why SMS-based two-factor auth is exposed to SIM swap and SS7 attacks, and what to use instead: TOTP authenticator apps and hardware security keys.
opinionsms
Luis Quintanilla Personal Website
Luis Quintanilla Personal WebsiteDec 29, 2017
Authorization Code Authentication Flow in Python
pythonapi
Luis Quintanilla Personal Website
Luis Quintanilla Personal WebsiteDec 26, 2017
Client Credentials Authorization in C#
csharpauthentication
Den Delimarsky
Den DelimarskyMay 13, 2013
Last.fm API For A Windows Phone App - Auth
Implementing Last.fm mobile session auth from a Windows Phone 7.5 app, including the MD5-signed parameter signature required by auth.getMobileSession.
windows-phonemicrosoft
Ben Werdmuller
Ben WerdmullerMay 6, 2013
HTTP signatures
It looks like I'm not the only person who likes the idea of signed HTTP requests as an authentication method. Joyent and Digital Bazaar have co-written an Internet draft for cryptographically signed HTTP requests: Several web service providers have invented their own schemes for signing HTTP requests, but to date, none have been placed in the public domain as a standard. This document serves that purpose. There are no techniques in this proposal that are novel beyond previous art, however, thi
Software developmentWeb