Just mentioning that I love AWS' signed request model. It's so much easier than dealing with OAuth for APIs and I wish it would catch on more broadly.
It's inspired an IETF RFC (https://datatracker.ietf.org/doc/html/rfc9421), so we'll see.
No comments yet.