Why OAuth Still Makes You Dance on Your Own Machine

Daniel just wanted to update a printer setting, but first he had to authenticate Claude through a browser that was already logged in. Why does OAuth make you jump through hoops on your own trusted machine? We break down the original threat model behind OAuth 2.0, PKCE's blast radius containment, and whether Linux's secret service APIs or kernel keyrings could short-circuit the redirect dance. Plus: why token lifecycle management makes the problem harder than better storage alone can solve. Episode #280207 — open it directly at myweirdprompts.com/280207