#oauth2-server
LightNews LightNews
tzolov.bsky.social
🚀 Spring AI 1.1.0 GA Released

🔧 Better MCP Integration ... 🔐MCP OAuth2 server protection 🔄 Recursive Advisors ...📦 Developer Experience: ... Over 850+ commits
Kudos to the entire Spring AI community! 🙌

Find more: spring.io/blog/2025/11...
@spring-ai.bsky.social
November 13, 2025 at 8:01 AM
wamwoowam.co.uk
hi!

@you-died.bsky.social now exists as a discord bot, feel free to torment your friends :3

add to a server or your profile: discord.com/oauth2/autho...
2 discord command invocations, the first creating the text "YOU DIED" as a dark souls 3 style death screen, the second saying "NOUN VERBED" as a dark souls 3 style event screen
November 13, 2025 at 7:58 PM
quarkus.io
Read "Use MCP OAuth2 Flow to access Quarkus MCP Server" by Sergey Beryozkin to see how MCP Client can use OAuth2 Flow to login users and access secure Quarkus MCP Streamable HTTP servers.

quarkus.io/blog/secure-...
Use MCP OAuth2 Flow to access Quarkus MCP Server
October 21, 2025 at 1:05 PM
llms.activitypub.awakari.com.ap.brid.gy
Error Message while connecting MCP Server with oauth2 I tried to connect our MCP Server to chatgpt with oauth2. Everthing seems to be fine. I got my login screen from our oauth2 provider, but after...

Origin | Interest | Match
Awakari App
awakari.com
August 13, 2025 at 9:37 AM
dailyqiitatrends.bsky.social
今日のQiitaトレンド

AgentCore Gatewayのターゲットタイプに「MCP server」が追加されたぞ！
Bedrock AgentCore GatewayにMCPサーバーを直接登録するターゲットタイプが追加されました。
これにより、外部MCPサーバーへの接続設定をエージェントのコードから分離し、Gateway側で一元管理できるようになります。
従来、サーバー変更のたびに必要だったコード修正が不要となり、開発プロセスが効率化され、MCPサーバーの追加や管理が容易になりました。
認証にはOAuth2などが利用可能です。
AgentCore Gatewayのターゲットタイプに「MCP server」が追加されたぞ！ #AWS - Qiita
はじめに 祝・Bedrock AgentCore東京リージョンへ登場！ その影に隠れてひっそりと、AgentCore Gatewayのターゲットタイプに MCP server が追加されました！ 同じタイミングで追加されたものじゃなかったらすみません) ドキュメントも...
qiita.com
October 12, 2025 at 10:19 PM
maloo.ski
If you want access to the Skeet Poster discord bot

1. Be a server admin

2. Click discord.com/oauth2/autho...

3. Go to a channel and type

/skeet track [handle]

You can untrack a user with

/skeet untrack [handle]
November 12, 2023 at 8:17 AM
goodman.dev
Here's my aspirational vision for a modelcontextprotocol.io (MCP) project. I'm pretty excited by the potential but the scope is _huge_.

If you're unfamiliar with the MCP, it tries to standardize a protocol for clients like Claude, Zed editor, etc. to get extensible super-powers.

WDYT?
MCP is a command-line tool and local UI for discovering, installing and managing Model Context Protocol servers. [!NOTE] This README describes an aspirational vision. Almost none of this is ready but this is intended to set the direction we're going. The mcp tool acts as an MCP Server for Clients like Claude and Zed. It is unique in that it doesn't provide any capabilities on its own. Instead it acts as a sort of broker between Clients and any number of installed Servers. The mcp tool facilitates that by helping you discover and install MCP Servers. It talks to a public registry of MCP Servers and is able to download, configure and run these in a secure and frictionless way. In addition to acting as a broker, mcp: 1. Allows Servers to request OAuth2 credentials and manages the flow for obtaining, storing and refreshing these credentials. 2. Keeps an audit log of all operations going through it and provides a UI for reviewing audit logs across different sessions and Clients. 3. Reduces host system dependencies to docker. By leveraging docker, mcp allows you to run Servers without mutating your host with any necessary tool-chains or dependencies. In addition, mcp leverages the containerization and isolation technology in docker to isolate your host system from malicious or buggy MCP Servers.
December 12, 2024 at 9:17 PM
jlferrete.bsky.social
Descubre cómo el MCP Server OAuth2 de Spring revoluciona la autenticación en tus apps, simplificando flujos y reduciendo errores. ¿Probarías esta herramienta? Cuéntanos tu opinión. https://spring.io/blog/2025/04/02/mcp-server-oauth2
April 13, 2025 at 11:31 AM
grixu.dev
3️⃣ One tool I’ve been tracking is OpenAuth: a self-hosted OAuth2 solution that works on Cloudflare Workers, AWS Lambda, Node.js, and more. It includes server/client libraries and a customizable UI. Check it out: https://buff.ly/4gbIQdQ
OpenAuth
Universal, standards-based auth provider.
openauth.js.org
January 3, 2025 at 1:42 PM
fusioapi.bsky.social
With the next Fusio version we will include a small OAuth2 authorization server which can be used by any app to simplify authentication, it also helps us with the upcoming MCP integration, here a sneak peak 🚀🚀🚀
July 13, 2025 at 10:22 AM
throwable.bsky.social
📦 etsvthor/laravel-bifrost-bridge 1.4.0

Connect a laravel application with the Bifrost oauth2 server

🔗 https://github.com/etsvThor/laravel-bifrost-bridge
August 1, 2025 at 11:58 PM
throwable.bsky.social
📦 mezzio/mezzio-authentication-oauth2 2.13.0

OAuth2 (server) authentication middleware for Mezzio and PSR-7 applications.

🔗 https://github.com/mezzio/mezzio-authentication-oauth2
October 15, 2025 at 6:12 PM
throwable.bsky.social
📦 groton-school/slim-oauth2-api-proxy 3.1.1

Server-side actions and routes for authenticating to and accessing an REST API from a web client

🔗 https://github.com/groton-school/slim-oauth2-api-proxy
September 19, 2025 at 2:25 AM
skywatch.bsky.social
Merged PR into main at bluesky-social/atproto: 🚧 OAuth2 - Authorization Server (#2482)
June 18, 2024 at 9:31 PM
throwable.bsky.social
📦 jeremy379/laravel-openid-connect 3.0.1

OpenID Connect support to the PHP League's OAuth2 Server. Compatible with Laravel Passport.

🔗 https://github.com/jeremy379/laravel-openid-connect
May 30, 2025 at 2:59 PM
danvega.dev
Everyone is talking MCP servers but how are we securing them? I just published a video where I went through an excellent article by @garnier.wf to secure an MCP server using OAuth2

youtu.be/gBUnLYFwwyE
Securing Spring AI MCP servers with OAuth2
YouTube video by SpringDeveloper
youtu.be
May 28, 2025 at 2:02 PM
I am still confused by what you do with the "collapsed" CLI and server. In a normal OAuth2 flow I need the client secret to exchange a code for an access token. If my CLI receives the code, how will it get an access token when it does not have access to the secret?
Secure authentication for frontend apps with PKCE — WorkOS
Learn what PKCE is, why it's essential for securely authenticating users in mobile and single-page apps, and how you can keep your users safe by using AuthKit and WorkOS.
https://workos.com/blog/secure-authentication-for-frontend-apps-with-pkce#:~:text=PKCE%20(pronounced%20“pixy”),is%20protected%20at%20all%20times
December 9, 2024 at 9:33 PM
opensource.activitypub.awakari.com.ap.brid.gy
Show HN: Graceful token refresh for open source OAuth2 Server Ory Hydra Article URL: https://gith...

https://github.com/ory/hydra/releases/tag/v2.3.0

Event Attributes
Release v2.3.0 · ory/hydra
We’re thrilled to announce the release of Ory Hydra 2.3.0! This version comes packed with graceful token refresh, performance improvements, and fixes that enhance stability, reduce database load, a...
github.com
January 21, 2025 at 4:25 PM
amdose.com
We just broke down the Authentication Server and Resource Server setup process step-by-step with practical examples.

Swing by our blog for the complete walkthrough and more Java security content!

#SpringSecurity #OAuth2 #JavaDevelopment #Security #APIAuthentication #MicroservicesSecurity
March 12, 2025 at 3:13 AM
eyalestrin.bsky.social
How to Secure Your A2A Server Agent with Keycloak OAuth2 #machinelearning #ai
How to Secure Your A2A Server Agent with Keycloak OAuth2
Eyal Estrin unread, 6:29 AM (10 minutes ago)    to https://medium.com/google-cloud/how-to-secure-your-a2a-server-agent-with-keycloak-oauth2-6112810ec7bb Eyal Estrin CISSP, CCSP, CISM, CISA, CDPSE, CCSK Blog: https://security-24-7.com | Books: https://amzn.to/42Xai9A | https://amzn.to/3Sggbtv Twitter: @eyalestrin | Bluesky: @eyalestrin.bsky.social Reply all Reply to author Forward
groups.google.com
October 30, 2025 at 1:39 PM
arisenjames.bsky.social
Spent hours today trying to fix a perl plugin I wrote when migrating it to the new server.

Someone has updated the Google OAuth2 module to rely on another module, but not corrected it for all the other modules that use it too.
June 12, 2024 at 5:32 PM
hnws.bsky.social
Show HN: Graceful token refresh for open source OAuth2 Server Ory Hydra
L: https://github.com/ory/hydra/releases/tag/v2.3.0
C: https://news.ycombinator.com/item?id=42781664
posted on 2025.01.21 at 11:06:41 (c=1, p=5)
January 21, 2025 at 4:24 PM
throwable.bsky.social
📦 groton-school/slim-spa-oauth2-client 1.0.1

Server-side actions and routes for authenticating to and accessing the an OAuth2 API from a Single Page (web) App

🔗 https://github.com/groton-school/slim-spa-oauth2-client
August 13, 2025 at 8:59 PM
heeki.bsky.social
As excitement with MCP continues to build, it's critical that security is baked into remote MCP server deployments. In this post, I do a refresher on OAuth2 and cover my journey of implementing OAuth2 with the MCP Python SDK. www.linkedin.com/posts/heekip...
Understanding OAuth2 and implementing identity-aware MCP servers | Heeki Park
As excitement with MCP continues to build, it's critical that security is baked into remote MCP server deployments. In this post, I do a refresher on OAuth2 and cover my journey of implementing OA...
www.linkedin.com
June 6, 2025 at 1:23 PM
xuanalogue.bsky.social
Anyway here's the service I used (paid, but worth it to me).

It works as an OAuth2 proxy server, allowing "legacy" apps like the Gmail web client to "Send mail as" an email address that would otherwise require OAuth2 (often w 2FA) for login:

auth-email.com
Email OAuth Made Easy | Auth-Email
Simplify your OAuth 2.0 email accounts and make them available to any client over IMAP/POP/SMTP. Securely manage multiple accounts from a single dashboard.
auth-email.com
August 4, 2025 at 3:17 PM