@davidgerard oh my, so many red flags in that “soul” file

@GossiTheDog @davidgerard I asked it to put an OIDC flow into a confidential app. It worked! I mean, it also sent all of the secrets and access keys via the client… but someone not paying attention would probably just take it.

We’re going to see the dumbest security issues of our lives in the next couple of years, aren’t we.

@christineburns Malcom Tucker would not be impressed