TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Ask HN: Why is OAuth still hard in 2023?

4 pointsby MorLalmost 2 years ago
Why do you think OAuth remains challenging even in the current technological landscape? Just yesterday, I came across a post discussing CVE-2023-28131, a vulnerability that has impacted hundreds of websites.<p>How can we address the recurring vulnerabilities and make OAuth more user-friendly and secure?

1 comment

greenviadalmost 2 years ago
CVE-2023-28131 was published in April.<p>But yes, great question<p>I think OpenId solves some of the issues, at least for authentication, not authorization.
评论 #36090544 未加载