4 ms·
What's the super Birds Eye view tldr reason that such a thing does require 20 million lines of code? How did this happen?
by Solvency 3y ago
What's the super Birds Eye view tldr reason that such a thing does require 20 million lines of code? How did this happen?
- flashback2199 3y agoI don't think OIDC requires a browser.
- anderspitman 3y agoI would be very interested to see an implementation that doesn't. And I'm not being sarcastic. Even the device flow has you open a browser on another device.
- pugz 3y agoI guess it depends on what we meant when we talk about OIDC, but in system-to-system authentication (e.g. GitHub Actions to ${cloud provider}), there are no browsers involved. But that's a fairly different use-case that happens to be under the OIDC umbrella. https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect https://docs.github.com/en/actions/deployment/security-harde...
- fireflash38 3y agoBasically just resource owner/password flow. Because clearly programmers don't know how to handle sensitive information, only browsers can.
- anderspitman 3y agoI think it mostly just evolved that way. OAuth started on the web and if you're using a browser anyway you might as well take advantage of HTML/JS rendering for the UI and cookies for secure storage.
- alexvoda 3y agohttps://player.vimeo.com/video/52882780 https://player.vimeo.com/video/52882780
- EGreg 3y agoWell I saw this the other day https://m.youtube.com/watch?v=kZRE7HIO3vk https://m.youtube.com/watch?v=kZRE7HIO3vk
- LastTrain 3y agoBecause everyone already has it installed.