
About this episode
Today we're joined by Aaron Parecki, co-founder of IndieWebCamp and maintainer of OAuth.net, for a deep dive on the state of OAuth 2.0 and what's next in OAuth 2.1. We cover the complications of OAuth, RFCs like Proof Key for Code Exchange, also known as PKCE, OAuth for browser-based apps, and next generation specs like the Grant Negotiation and Authorization Protocol, also known as GNAP. The conversation begins with how Aaron experiements with the IndieWeb as a showcase of what's possible.
Get every episode summarized
Each time Changelog Interviews publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from Changelog Interviews

Forking Cal.com to closed source
Changelog Interviews
Sep 3, 20261:54:32completed

Postgres at PlanetScale
Changelog Interviews
Aug 25, 20261:42:17pending

Canary tokens and digital tripwires
Changelog Interviews
Jul 21, 20262:06:48pending

From open source hits to OpenAI
Changelog Interviews
Jun 5, 20261:46:28pending