Justin Richer – Medium

Justin Richer

Applying RAR in OAuth 2 (and GNAP)

The Rich Authorization Request extension to OAuth 2, or RAR, is a way to talk about access in the OAuth space beyond what scopes allow, and…

6 min readFeb 22, 2024

--

Applying RAR in OAuth 2 (and GNAP)

--

Justin Richer

Discovery, Negotiation, and Configuration

Interoperability is a grand goal, and a tough problem to crack. After all, what is interoperability other than independent things just…

6 min readDec 14, 2023

--

Illustration of many plugs (generated by DALL-E)

--

Justin Richer

Federation Bubbles

We’ve spent decades building up systems that identify people and devices, and interconnect all of them. We’ve built systems that let us…

9 min readAug 4, 2023

--

1

Federation Bubbles

--

1

Justin Richer

What happened to MITREid Connect?

MITREid Connect was, at one time, one of the top open source implementations of OpenID Connect and OAuth 2.0. Written in Java and targeted…

5 min readMay 2, 2023

--

What happened to MITREid Connect?

--

Justin Richer

The GNAPathon

At the recent IETF 113 meeting in Vienna, Austria, we put the GNAP protocol to the test by submitting it as a Hackathon project. Over the…

4 min readApr 11, 2022

--

--

Justin Richer

Signing HTTP Messages

There’s a new draft in the HTTP working group that deals with signing HTTP messages. Why is it here, and what does it give us?

7 min readMay 4, 2021

--

1

Signing HTTP Messages

--

1

Justin Richer

Filling in the GNAP

About a year ago I wrote an article arguing for creating the next generation of the OAuth protocol. That article, and some of the other…

4 min readOct 22, 2020

--

--

Justin Richer

XYZ: Cryptographic Binding

This article is part of a series about XYZ and how it works, also including articles on Why?, Handles, Interaction, and Compatibility.

5 min readJul 1, 2020

--

1

XYZ: Cryptographic Binding

--

1

Justin Richer

XYZ: Interaction

This article is part of a series about XYZ and how it works, also including articles on Why?, Handles, Passing by Reference, and…

7 min readJun 18, 2020

--

XYZ: Interaction

--

Justin Richer

XYZ: Compatibility With OAuth 2

This article is part of a series about XYZ and how it works, also including articles on Why? and Handles, Passing by Reference, and…

6 min readJun 16, 2020

--

1

XYZ: Compatibility With OAuth 2

--

1

Justin Richer

Justin Richer

Justin Richer is a security architect and freelance consultant living in the Boston area. To get in touch, contact his company: https://bspk.io/

Following

Help
Status
About
Careers
Blog
Privacy
Terms
Text to speech
Teams