OIDC

Formal describes giving its cloud-based AI agents direct access to production infrastructure, using OIDC federated identity instead of long-lived secrets or API keys. The post explains how short-lived, scoped credentials allow agents to query prod safely, and the approach is drawing attention from developers weighing similar patterns for their own agent deployments.

A developer announced Poweur ID, an open identity system that users hold themselves rather than relying on a central provider. Each ID combines a readable name, such as one hosted on a personal domain, with cryptographic keys stored on the user's own devices. The same identifier signs users in to apps via OIDC and IndieAuth, receives end-to-end encrypted messages, and supports encrypted sharing. Early reactions come from the open social web community, where interest in self-hosted identity is strong.