Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Fedcm offers some hope here, where the browser gets some capability to announce the federation domains to the RP. It's not straightforward though, of course. In this case though it's inverted - you are providing the url of the MCP server, and the MCP server is providing the url of an authz server it supports. The client is uses the metadata lookup to know if it should include PKCE bits or not.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: