HeadlinesBriefing favicon HeadlinesBriefing.com

L'enregistrement dynamique des clients résout le problème n² d'OAuth

Hacker News •
×

The author envies Zapier's extensive connectors library and wishes their app, Val Town, a vibe coding platform, could one-click connect to every app. The core n² problem persists: every app must register as an OAuth client for every other app, often involving manual steps like forms, demo videos, or paperwork. Hope arrives via Dynamic Client Registration (DCR), an OAuth extension added to the spec for MCP by Anthropic and Open AI to avoid managing countless OAuth clients.

DCR automates client provisioning, allowing an app to dynamically register and immediately start an OAuth flow with a previously unknown service. Val Town implemented this while building their MCP server, enabling OAuth connections from Claude and Chat GPT. They created `std/oauth`, a middleware library adding "Login with Val Town" in two lines of code, with the OAuth client created automatically on first user login. Further simplification comes via Client ID Metadata Documents (CIMD), which eliminate pre-registration entirely by self-hosting OAuth client data at a URL. Notion's CIMD endpoint exemplifies this, returning server metadata to initiate flows instantly.