Ō̴̡̨͍͕̠̹̘͖͓̭̝̰̖͉̬̫͍̝̰̟͖͖̞͇̟̻̫͇̠̯̋̋̂ͅͅA̷̡̧͎̫̬͖̠͍̼̗̠͊̉̏̓̈́̂̀̈́͆͘͜uth @oktadev oauth.wtf oauth.net 🎥 livestreaming youtube.com/aaronpk aaronpk.tv 💛 #indieweb 🐘🦋
Portland, Oregon
Joined April 2008
- Tweets 11,388
- Following 1,223
- Followers 6,415
- Likes 9,609
Shoutout to all my friends who, in the last 3 years, I have only communicated with by exchanging high fives on @Duolingo!
We should hang out more often!
4
Sorry yeah, I was talking about your recommendation of unlisting *instead of* deleting. Unlisting it would only prevent new discovery of it, but wouldn't stop people from viewing it from their watch history or by sharing the link.
1
Interesting. That also suggests a viewer who has already watched it could go back in their history to find it and watch it again. So it's mainly just gone from recommendations and new viewers, but not actually impossible to watch again, right?
1
Oh shoot! I was planning on reaching out once the panini was over about doing a collab in Portland! Times are weird tho. Gotta update your twitter bio now 😉
Ah yes, classic. I'm curious if this is a first party or third party use case. We can take this to dms jf you want
1
Oh do tell! If anything was unclear or ambiguous, I would love to know! I'm in the middle of updating that with the OAuth 2.1 draft so now is the time to fix it!
1
1
By popular request, I just published a version of "The Little Book of OAuth 2.0 RFCs" as a free downloadable PDF!
oauth.net/books/#little-book…
1
31
5
100
Remember folks, "token exchange" does *not* mean "let me exchange a customer ID for a token"!
Good thread on how remotely connected Honda, Nissan, Infiniti, and Acura cars were all able to be remotely controlled knowing only the VIN.
It returned "200 OK" and returned a bearer token! This was exciting, we were generating some token and it was indexing the arbitrary VIN as the identifier.
To make sure this wasn't related to our session JWT, we completely dropped the Authorization parameter and it still worked!
2
1
12
A corporate AMEX acct has a max length of 20 chars for the street address, and no second line. Between a 4-digit street number and "Apt XXX", that leaves only 8 left for the street name and type.
So cross your fingers that USPS figures out this abbreviated street name I guess.
2
I don't think google has their identity strategy coherent enough for even them to do it if you were able to call them on the phone and ask them to change your email 😅
1
2
Just click the "Download Zip" and save it somewhere, then you can poke around the youtube.css file all you want!
1
I'm not planning on adding a UI to customize things that much, but the whole thing is open source and you can dig into the CSS yourself! There's instructions here for how to load your copy of it outside the Chrome store.
github.com/aaronpk/live-chat…
1
1