Topic

#Oauth

7 articles on Oauth — news, releases, guides and analysis from the SourceFeed engine.

Stop Treating Your JWT Like a Database

The payload is base64, not ciphertext — and the fix isn't encryption, it's putting less in the token.

A veteran browser-security engineer ran phishing triage on the Wallets launch, and Cloudflare's own support AI agreed with him.

TA488's OWAReaper turns Exchange folder permissions into a foothold that survives credential rotation and re-imaging alike.

The attackers registered lookalike domains and got real certificates, which tells you exactly which defense works.

A third-party OAuth compromise exposes customer data, highlighting the critical need for strict API token scoping and zero-trust integrations.

Scoped, revocable delegated access finally replaces pasted API tokens for anyone building on Cloudflare's platform.

The Enterprise-Managed Authorization extension replaces manual consent prompts with centralized, identity-driven token exchange for AI agents.