Engineering
Hacking SAML with Claude Code
After many years of complaining about how insecure SAML is, I decided to try to prove it by using Claude Code to hack every SAML implementation I could find.
CTO
CTO
Eric is an engineering leader with 10+ years experience in cloud identity, OS security, and hardware attestation. He worked in Google's Security org for over six years, wrote Dex at CoreOS, and co-lead the Kubernetes Auth Special Interest Group.
Engineering
Generating an MCP server in Go
MCP is table stakes for any service, and Go's official SDK makes support trivial. The hard part is staying current, so we generate ours from Protobuf.
CTO
CTO
Engineering
Passkey PRFs for end-to-end encryption
The passkey PRF extension lets syncable credentials do much more than login users. See how apps are using this for end-to-end encryption.
CTO
CTO
Engineering
Go’s synctest is amazing
We threw Go’s new “testing/synctest” package at a particularly gnarly part of our codebase and were pleasantly surprised by how effective it was.
CTO
CTO
Engineering
Injection-proof SQL builders in Go
SQL builders are always one bad logic bug away from full-blown query injection. Oblique uses Go type tricks to prevent this entire class of backend issues.
CTO
CTO
Engineering
Authenticating GitHub Actions without API keys
Instead of minting long-lived API keys and warning users “keep this secret,” let's use GitHub Action's OpenID Connect support instead.
CTO
CTO
Ready to stop managing access manually? Let Oblique handle it
Tell us what you're running and we'll get you set up.