tag:speakerdeck.com,2005:/aaronpktag:speakerdeck.com,2005:Talk/14703172025-11-24T20:46:24-05:002025-11-24T20:48:34-05:00OAuth for MCP - Internet Identity Workshop October 2025Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/13805202025-06-06T16:19:43-04:002025-06-06T16:22:38-04:00The State of OAuth 2025 - Identiversehttps://identiverse.com/idv25/session/?idvid=2812734Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/14618852025-11-06T13:31:48-05:002025-11-06T13:51:14-05:00OAuth for MCPAaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/12706012024-10-31T17:33:23-04:002024-10-31T17:43:57-04:00IIW 39 - OAuth 101Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/14174372025-07-31T10:32:13-04:002025-07-31T10:43:18-04:00OAuth in Native Apps - OAuth Security WorkshopSlides from my presentation on OAuth in Native Apps at the OAuth Security Workshop. Unfortunately the embedded videos don't play in the PDF version. I extracted the video clips and posted them here: https://aaronparecki.com/2024/04/11/23/oauth-native-apps-osw-2024Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/10686892023-08-28T14:06:00-04:002023-08-28T14:12:48-04:00Targeted Logout - OAuth Security Workshop 2023Presented at the OAuth Security Workshop
https://events.oauth.net/2023/08/oauth-security-workshop-2023-2gZNVdvPH0XSAaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/10409832023-06-21T15:41:36-04:002023-06-21T15:43:51-04:00Enterprise-Ready: Going Beyond MVPReady to move beyond MVP in the journey of adding enterprise-ready identity in your SaaS app? With the must-have functionality in place, you're ready to make your app stand out, get noticed by enterprise customers, and handle user provisioning and automation that can scale!
Slides from Devday23
https://developerday.com/events/devday23-wicAaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/8689652022-05-07T11:55:02-04:002022-05-07T12:02:27-04:00App Integrity Attestations for OAuth - OAuth Security Workshop 2022Currently, the security of native apps in OAuth is contingent upon registering the app's callback URL with the operating system, preferably as an app-claimed HTTPS URL. While this provides some level of assurance of the app's identity, it is by no means foolproof.
Authenticating whether a particular instance of a public client in OAuth is a legitimate instance remains a challenge.
This session will explore the possibility of using Apple and Android’s “app attestation” APIs as a form of OAuth client authentication. These APIs are able to leverage on-device private keys and a certificate chain to provide an additional level of confidence that the app making an HTTP request is the same code that was shipped in the app stores.Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/7139232021-03-12T11:48:38-05:002021-03-12T11:50:13-05:00Intro to OAuth - IETF 110My presentation at the SAAG meeting at IETF 110Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/6753692020-10-20T16:08:06-04:002020-10-21T11:55:34-04:00OAuth 101 - Internet Identity Workshop XXXIhttps://aaronparecki.com/2020/10/20/8/Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/6667182020-09-16T21:43:14-04:002020-09-16T21:46:36-04:00What's New with OAuth and OpenID Connect - API Days Australiahttps://aaronparecki.com/2020/09/16/23/Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/6631212020-09-02T12:08:49-04:002020-09-02T12:11:25-04:00How to Think about OAuth Security - Disclosure 2020Slides from my talk at Disclosure Conference
https://disclosureconference.com/Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/6543252020-07-22T10:05:51-04:002020-07-22T10:06:51-04:00OAuth 2.1 - OAuth Security Workshophttps://aaronparecki.com/2020/07/22/9/Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/6543152020-07-22T09:18:15-04:002020-07-22T09:18:48-04:00Protecting Single-Page Apps using OAuthhttps://aaronparecki.com/2020/07/22/7/Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/6498942020-07-04T12:48:34-04:002020-07-04T12:49:57-04:00The State of OAuthPresented at Interface by API DaysAaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/6378682020-05-08T14:51:54-04:002020-05-08T14:52:44-04:00OAuth 2.0 Client Intermediary Metadata - IETF 107Presented at IETF 107 virtual interim meeting.
https://events.oauth.net/2020/05/oauth-virtual-interim-meeting-client-intermediary-and-reciprocal-oauth-BmTavIx802EzAaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/6358922020-04-28T15:20:09-04:002020-04-28T15:23:35-04:00How to Hack OAuth - Goto Chicago 2020https://aaronparecki.com/2020/04/28/12/Aaron Parecki (@aaronpk)tag:speakerdeck.com,2005:Talk/6168612020-03-31T11:37:47-04:002020-03-31T11:44:02-04:00What's New with OAuth and OpenID Connect?In this talk you'll learn about the latest developments with the OAuth and OIDC specs directly from the standards group. The latest additions to the specs enable richer experiences and better security for applications using OAuth.
https://www.oktane20.com/agenda#573Aaron Parecki (@aaronpk)Aaron Parecki (@aaronpk) on Speaker Deck2025-11-24T20:46:24-05:00