Some thoughts on adding identity to OAuth XYZ, a new draft spec to be discussed at #ietf105 next week. If we're going to re-think OAuth from the ground up, we should build in support for common use cases. aaronparecki.com/2019/07/18/…