Blog

Notes on OIDC, identity federation, and securely verifying tokens from private services.