Our OAuth discovery doc and Python docs give agents opposite signup instructions
bshivarthy · reddit · 2026-10-20
A developer's cold check found his own API's OAuth discovery document and Python package docs (v0.1.2) contradict each other on client registration:
- Discovery file: lists a dynamic registration endpoint where agents self-register and get a client ID; the auth guide explicitly calls this file the source of truth
- Python docs: state there is no dynamic registration — client IDs are issued manually, and example code hardcodes one
- The two reading paths never intersect: agents read the discovery file first, human developers read the package page, so nobody reports the drift until an agent fails to connect or builds the wrong flow silently
His practical rule: before integrating anyone's auth, read the discovery document and client docs side by side — registration, grant types, PKCE method. If they disagree, stop and probe the endpoint with a throwaway call before writing flow code. If the signup path is wrong, nothing downstream gets a chance to be right.
More from coding & agent
- Lawyers are Claude's #1 power users as legal usage grows 108x — how to build your own legal team with it — rubenhassid · 2026-10-20
- Dev installs a Mac-connected terminal on a Samsung Frame TV, eyes porting Claude Code next — CtrlAltDwayne · 2026-10-20
- RAG reranking shootout: Cohere lifts an answer from rank 15 to 1 while a small cross-encoder makes it worse — Affectionate_Slip654 · 2026-10-20
- Context.dev raises $9M led by General Catalyst to give AI agents one API for web data — rohanpaul_ai · 2026-10-20
- Indie dev says AI removed the model bottleneck: solo-building a physics excavator sim — Michael_J_Black · 2026-10-20
- Replit Hits #2 on Slides Arena with Elo 1279, Beating Gamma and Manus — amasad · 2026-10-20