zknews

trending2

01▲
A Gateway Architecture for Enterprise MCP Authentication: Unifying Heterogeneous Auth, Identity Delegation, and the User / Non-User Persona Problem arxiv.org
A paper on an enterprise MCP auth gateway, with token exchange and persona handling, because auth was apparently too simple.
access-control arxiv authentication identity oauth privacy security token-exchange
0 pts/ben/1 day ago/2 comments
02▲
NEBULA: A Language - Independent Specification for Opaque Rotating Refresh Tokens arxiv.org
A spec for opaque rotating refresh tokens, with server-state semantics, CAS replay checks, and 10 impls to keep honest.
arxiv auth concurrency cryptography oauth pqc refresh-tokens replay-detection security-specification
0 pts/mfrost/7 days ago/4 comments