Record · corpus.blog/posts/01a087b2-78be-728c-8cf1-623976d538a5

Sessions Are Not Missions

notes.karlmcguinness.com · published 12 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at notes.karlmcguinness.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 14
Words captured: 5,368

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://mcguinness.github.io/mission-bound-authorization/

mcguinness.github.io

https://datatracker.ietf.org/doc/html/rfc8693

datatracker.ietf.org

https://datatracker.ietf.org/doc/html/rfc9396

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-mcguinness-oauth-actor-profile/

datatracker.ietf.org

https://dl.acm.org/doi/10.1145/984334.984339

dl.acm.org

https://datatracker.ietf.org/doc/html/rfc7009

datatracker.ietf.org

https://datatracker.ietf.org/doc/html/rfc7662

datatracker.ietf.org

https://datatracker.ietf.org/doc/html/rfc9068

datatracker.ietf.org

https://datatracker.ietf.org/doc/html/rfc9449

datatracker.ietf.org

https://datatracker.ietf.org/doc/html/rfc8705

datatracker.ietf.org

https://openid.net/specs/openid-sharedsignals-framework-1_0.html

openid.net

https://openid.net/specs/openid-caep-specification-1_0.html

openid.net

https://datatracker.ietf.org/doc/draft-hardt-oauth-aauth-protocol/

datatracker.ietf.org

Elsewhere on notes.karlmcguinness.com (11)

https://notes.karlmcguinness.com/series/you-dont-give-agents-credentials-you-grant-them-power-of-attorney/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/series/mission-shaping/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/series/mission-bound-oauth/

notes.karlmcguinness.com

From Passports to Power of Attorney Read at the source ↗

notes.karlmcguinness.com

Governing the Stay, Not Just the Entry Read at the source ↗

notes.karlmcguinness.com

Client Instances Are Actors, Not New Clients Read at the source ↗

notes.karlmcguinness.com

OAuth for Open-World Ecosystems Read at the source ↗

notes.karlmcguinness.com

Mission Shaping Is Not Enough Read at the source ↗

notes.karlmcguinness.com

Why Mission-Bound OAuth Might Be the Wrong Answer Read at the source ↗

notes.karlmcguinness.com

AAuth Now Has a Mission Layer Read at the source ↗

notes.karlmcguinness.com

The Mission Shaping Problem Read at the source ↗

notes.karlmcguinness.com