Tag

#oauth

466 posts30 followers

Explore Hashnode

Alternatives

Three teams plugged MCP servers into our agent. Security asked who checks the permissions.

Our internal agent started small, with one MCP server my team wrote. Within a quarter, two more teams had connected their own servers to it. One exposed billing lookups and one could open tickets in a

kartiknvjk.hashnode.dev

Geekcoding101dotcom1d ago · 7 min read

OAuth 2.0 Grant Types Explained (Is PKCE One?)

Originally published at GeekCoding101. Below is a table summarizing the different grant types in OAuth 2.0 along with brief descriptions and recommendations regarding their use: Grant Type Descript

geekcoding101.hashnode.dev

Pixel Web Solutions1d ago · 7 min read

Designing an MCP Server for an Internal AI Agent: Tools, Auth and Guardrails

Most internal AI agents need to do more than chat. They need to look up an order or open a ticket. The Model Context Protocol (MCP) has become the standard way to expose those capabilities: you run an

1 pixelwebsolutions.hashnode.dev

Devang Pandya4d ago · 11 min read

How Google Keeps You Logged In Across Gmail, YouTube and Drive: Sessions vs JWT vs SSO, Made Simple

By Devang Pandya · Cloud Tech by Devang · Cloud • DevOps • AI — Made Simple This post is the full breakdown for the "first day at a new office" story Reel. If you came here after commenting JWT, welc

cloudtechbydevang.hashnode.dev

Alok Singh5d ago · 15 min read

Building an AdMob Earnings Dashboard for iOS: Google OAuth with PKCE, the AdMob Reporting API, Pacific-Time 'Today', and Offline Caching

Signing in with ASWebAuthenticationSession and PKCE, storing tokens safely in the Keychain, calling networkReport:generate, decoding a streamed report, turning micros into money, why "today" is a Los

aryansbtloe.hashnode.dev

Chris F A5d ago · 6 min read

Supabase OAuth in Expo: Why Sign-In Never Comes Back to Your App

You add "Sign in with Google" to your Expo app. The browser opens, you pick your account, consent... and then nothing. The browser sits on a blank page, or a localhost:3000 page, or it closes and your

applighter.hashnode.dev

Vikram Kumar ShuklaOct 19 · 4 min read

One SDK parameter could reroute your OAuth secrets to an attacker. SAP gave it a CVSS 10.0.

CVE-2026-89111 landed on October 13, and it is the kind of bug that makes you stare at your own codebase for a minute. The SAP Cloud SDK for Python, which a lot of multi-tenant SAP Business Technology

vikramkumarshukla.hashnode.dev

Waseem AnjumOct 18 · 15 min read

MCP Security in 2026: The OAuth SDK CVEs, Tested, and How to Lock Down Your Server

MCP security in October 2026 mostly means OAuth. Within two days of each other, both official MCP SDKs, TypeScript and Python, published high-severity advisories for the same flaw: a malicious MCP ser

fabwaseem.hashnode.dev

Manveer ChawlaOct 17 · 30 min read

Build a Multi-Tenant MCP Server with OAuth Using Clerk and Arcade Cloud

Our customers kept asking the same question: can we use Zenith with Claude and ChatGPT? Zenith is an AEO service for technical products, and customers use our SaaS dashboard to monitor their share of

aiagentengineering.hashnode.dev

FlowpajaOct 17 · 15 min read

Make.com OAuth redirect URLs: the integromat.com callbacks, your own Google client and HTTP OAuth 2.0

Short answer: when you create your own OAuth client for Make, the redirect URL (callback URL) depends on the app, and most of them still start with www.integromat.com/oauth/cb/, from before Integromat

flowpaja.hashnode.dev

Search Hashnode