Blog
Mostly deep dives into authentication, OAuth and MCP — and sometimes just thoughts worth writing down.
The same OAuth 2.1 walkthrough, as a flippable deck
A slide-deck version of the OAuth 2.1 discovery dance — challenge, protected-resource metadata, AS discovery, DCR, PKCE, and the parts that silently fail. Flip through hop by hop.
A hop-by-hop look at the OAuth 2.1 dance that runs before the first tools/list
Building a zero-dependency MCP server + OAuth server and watching every request and response to learn how a client really authenticates — discovery, DCR, PKCE, and the parts that silently fail.
Understanding how a client is supposed to connect to a server
A look at the MCP connection handshake — transports, protocol version negotiation, and how auth enters the picture.