Post

Passport handles human identity well, but the harder problem coming fast is *agent* identity — when your CI pipeline or AI assistant hits a protected route, the IdP has no concept of "this is an authorized agent acting on behalf of user X." OIDC wasn't designed for that delegation chain.