Blog
Notes on OIDC, identity federation, and securely verifying tokens from private services.
-
June 15, 2026
Debug OIDC token validation with a disposable public issuer
Use a disposable public OIDC issuer to mint controlled tokens, tune verifier claim rules, and catch issuer, audience, subject, and JWKS problems before production.
-
May 28, 2026
Why your private IdP needs a public discovery endpoint
To federate a self-hosted OIDC IdP with AWS, GCP, or Vault, your discovery endpoint must be reachable from the public internet. Here's why — and how to expose only what's needed.