Search | Sagara Gunathunga

Sagara Gunathunga

Making IAM Reachable for Devs.
Head of DevRel @ WSO2 IAM.
A maintainer of ThunderID. Author of Hands-On Spring 6.

Latest Publication

Browse by tag

Agent Identity 2
- Why We Only Catch "Rogue" AI Agents by Accident
- Browser-Based Agents Are Impersonating You: The Agent Identity Problem
MCP 5
OAuth 2.0 13
OpenID Connect 2
- OAuth 2.0 Server Discovery with .well-known Metadata
- OAuth 2.0 Explained: Roles, Grants, Tokens and Extensions
SAML 5
mTLS 2
- Certificate-Bound Access Tokens: How mTLS Makes Stolen Tokens Useless
- mTLS for OAuth2 Client Authentication: A Stronger Alternative to Shared Secrets
JWT 2
- JARM Explained: Signed OAuth 2.0 Authorization Responses
- JWT-Secured Authorization Request (JAR): RFC 9101 Explained
API Security 2
- Why We Only Catch "Rogue" AI Agents by Accident
- Preventing BOLA and BFLA: OWASP API Authorization Flaws
Delegation 2
- Why We Only Catch "Rogue" AI Agents by Accident
- OAuth 2.0 Token Exchange (RFC 8693) in Practice

Search

Search any article ...