• Karol Grecki in Software Development

    What went wrong with OAuth2
    • OAuth 2.0 and the Road to Hell
      OAuth 2.0 and the Road to Hell

      They say the road to hell is paved with good intentions. Well, that's OAuth 2.0. Last month I reached the painful conclusion that I can no longer be associated with the OAuth 2.0 standard. I resigned my role as lead author and editor, withdraw my name from the specification, and left the working group.

    Show previous comment
    • Peter Johnson
      Peter Johnson
      Wow, reflective, I think he was crying when he wrote this...
    • Peter Johnson
      Peter Johnson
      Any developer will tell you OAuth2 is a massive pain to implement, but I always assumed that it would pay off in the end as more and more sites moved to the new standard. It seems now that only a limited amount of sites have moved to OAuth2 (most notably Facebook/Twitter), while other sites seem to be sticking to v1. This criticism may discourage more organizations from moving to v2...
    • Rowan Manning
      Rowan Manning
      Yeah I read this the other day – interesting article, a shame though