vips7L

Coming from the Java side this is typical of Google libraries. They start off impressive and gain wide adoption but then they stop supporting changes the community wants, missing basic features.

Jesus man take some responsibility.

Thanks for reminding me of Fossil. I've been developing something locally and keeping track of things in a text file.

> in order to dismiss your work

That’s because it’s not your work.

Grifter gonna grift.

I've never worked at a place where the code was "good".

> OAuth makes zero assumptions about how you login

Neither does OIDC: "The methods used by the Authorization Server to Authenticate the End-User (e.g., username and password, session cookies, etc.) are beyond the scope of this specification."

OAuth makes zero assumptions about a lot of things, like even how you "authorize". That doesn't mean that authentication doesn't play a crucial role. While it doesn't specify how you authenticate the user it still specifies that you must authenticate the user. Outside of the authorization code flow, other flows strictly mandate that you should authenticate the clients.

I kinda disagree. Authentication is at OAuths core. You still need to authenticate to obtain a token and in more complex setups you don’t use it for authorization at all because tokens are stale immediately after issuing them. It’s why things like Zanzibar and OPA have been made.

OIDC is a layer on top of OAuth...

Amdahl’s law.

This might be dogmatic, but I genuinely don’t care. Outside of the business not caring enough to get a human to respond, I just don’t want to give money to people using LLMs. The technology is based off of theft from the working class. It’s the same reason I choose union businesses.

Yes.

This is why I’ve thought that MCP and LLM access never made sense. You’re moving your users out of your brand and out of product.

Not in my experience

Java has had plugin isolation libraries for decades.

Can they produce decent code at all?

Claude sucks.

sad days

I don’t know why anyone just blatantly copies and paste LLM output. Laziness? Anxiety about being wrong? I don’t know.

It’s awful. A ton of words to say absolutely nothing.

I’m building my own OAuth provider. I know there’s a lot of options out there but I’ve built one at work for the last 5 years and I’d like to “do it right”

So if Y happened (they stole it), why should we be happy about that? Why should we give them credit in the situation where they stole it? Why is that good for society?

It was inconsiderate and it was also stolen, just like everything else OpenAI has stolen to train their models.

You literally said they _stole_ the work. Why should we give credit to that?

It's immoral to steal someone's research. Quite sad that you don't believe that.

Whether you use async or blocking calls you’ll still want to keep IO at your edges otherwise you end up with tightly coupled spaghetti.

We should be happy that they’re stealing people’s work?

Why what benefit has it brought? Mass anxiety?

Just like using LLMs. Completely optional.

Pure marketing slop.