Mehdi Akiki

Posts tagged "OAuth"

  • Published on

    Article · Interrupted execution

    Preventing an OAuth Token Refresh Stampede

    A concurrent refresh design using local single-flight work, database versions, conditional writes, and recovery rules for providers that rotate refresh tokens.
  • Published on
    A reference flow for keeping user identity, tenant, audience, and allowed actions attached to every AI tool call without trusting the model to enforce permissions.