Tootfinder

Automated Repair of OpenID Connect Programs (Extended Version)
Tamjid Al Rahat, Yanju Chen, Yu Feng, Yuan Tian
https://arxiv.org/abs/2510.02773 https://arx…

Automated Repair of OpenID Connect Programs (Extended Version)
OpenID Connect has revolutionized online authentication based on single sign-on (SSO) by providing a secure and convenient method for accessing multiple services with a single set of credentials. Despite its widespread adoption, critical security bugs in OpenID Connect have resulted in significant financial losses and security breaches, highlighting the need for robust mitigation strategies. Automated program repair presents a promising solution for generating candidate patches for OpenID imple…

OpenID Connect for Agents (OIDC-A) 1.0: A Standard Extension for LLM-Based Agent Identity and Authorization
Subramanya Nagabhushanaradhya
https://arxiv.org/abs/2509.25974 https:…

OpenID Connect for Agents (OIDC-A) 1.0: A Standard Extension for LLM-Based Agent Identity and Authorization
OpenID Connect for Agents (OIDC-A) 1.0 is an extension to OpenID Connect Core 1.0 that provides a comprehensive framework for representing, authenticating, and authorizing LLM-based agents within the OAuth 2.0 ecosystem. As autonomous AI agents become increasingly prevalent in digital systems, there is a critical need for standardized protocols to establish agent identity, verify agent attestation, represent delegation chains, and enable fine-grained authorization based on agent attributes. Thi…

Do you mysteriously not get emails - not even in your spam folder? If you're on a Microsoft system, this link might let you see emails invisibly held in quarantine: https://security.microsoft.com/quarantine?viewid=Email

Today I improved our old OAuth2 server by adding a `/.well-known/openid-configuration` endpoint (and a few other minor improvements to make it work with a new client). But if anybody knows how to generate a JWKS from a ES512 public key (in #Perl) I'd appreciate a hint...