August 2026
Implicit and Confidential are not opposites. Sorts OIDC / OAuth 2.0 vocabulary into flow, client type and client authentication axes, and shows how PKCE broke the old assumption.
Lists the JWA algorithms usable for OIDC id_token signing, explains why to avoid HS256, how alg confusion attacks work, and shows code that pins the expected alg.
m4a files made with ffmpeg play on Toyota car navigation but show no tags. The cause is the hdlr atom, afconvert fixes it, and here is what does not.
Fix persistent audio dropouts on Mac after high-load Xcode builds. Restart the Core Audio daemon with `sudo killall coreaudiod` to restore playback.
A Claude custom connector is just an MCP server. Here is how to authenticate one against your own OIDC provider, with the security details that matter.
Recent Posts
- Sorting OIDC / OAuth 2.0 Terms into Three Axes — Authorization Code / Implicit / Confidential / Public / PKCE
- Choosing an OIDC id_token Signing Algorithm — RS256 / ES256 / HS256, and the One Line That Matters More
- How to Convert wav to m4a with Tags Toyota Car Navigation Can Read
- Fix: Choppy Audio Playback on Mac by Restarting coreaudiod
- Building a Claude connector authenticated by your own OpenID Connect (OAuth2) provider
Recent Deliverables
Categories
- Django (66)
- Python (49)
- mac (21)
- Linux (17)
- kubernetes (15)
- iOS (11)
- MySQL (10)
- Raspberry-Pi (8)
- AWS (7)
- PHP (6)
- Javascript (5)
- PC/Etc (5)
- Docker (5)
- Android (4)
- Bicycle (4)
- (4)
- css (3)
- nginx (3)
- Shellscript(Bash/Zsh) (3)
- Flutter (3)
- nuxt (3)
- Bootstrap (3)
- Windows (2)
- HTML (2)
- Making (2)
- Rails (1)
- (1)
- (1)
- AI (1)
- (1)
- less (1)
- Microcontrollers (1)
- Ebook (1)
- Ansible (1)