Andrea Chiarelli

It's not easy to describe what a developer advocate does, so I wrote this booklet to explain it to anyone who's interested (and to clarify it for myself, too). Download it now and let me know what you think! It's free! 👇 leanpub.com/i-am-a-develop…

I've noticed some common myths about FAPI and tried to clear them up in the quick summary below. Read the full article if you want to learn more: auth0.com/blog/common-fa…

The C# SDK for MCP offers a great developer experience for .NET devs. But what about securing the MCP server? In this article, I demonstrate how to protect the tools exposed by a C# MCP server using @auth0 auth0.com/blog/secure-cs…

Your company’s new “AI agent workflow” 🤣 That was painful to watch. 😭

we just shipped @auth0 agent skills AI coding assistants can now implement secure, production-ready auth across all major frameworks. React. Next.js. Vue. Angular. Nuxt. Express. React Native. $ npx skills add auth0/agent-skills

Here is a very quick overview of the relationship between OAuth 2.0 and FAPI. Enjoy! dev.to/auth0/strength…

I updated this article on securing a .NET RAG application using @auth0 FGA to prevent user access to unauthorized document data 🔑 The sample app is a Blazor chatbot 🤖 Code is on GitHub ⌨️ Take a look 👀 auth0.com/blog/secure-do…

Federated Identity and Single Sign-On (SSO) are closely related but distinct. SSO is the seamless login experience, while Federated Identity is the architecture for cross-system validity. If you'd like to learn more, I've written an article on this auth0.com/blog/federated…

@RaminNasibov Me 😜

Can you name a famous Italian person without using Google?

Brief History of Computers

Do machines understand? What exactly does "understanding" mean? How do we determine whether someone or something "understands"? Is it wrong to say that AI understands? I have summarized some thoughts on the topic in this article: theturingmachine.net/duck-intellige…

There is no stopping OpenClaw (formerly known as Moltbot and Clawdbot). But here is a five-step checklist to make it safe. Learn more here: bit.ly/3ZOv7mu

Broken Access Control tops 2025 OWASP lists for web apps and APIs. It persists despite modern tools. Why is it still so hard to fix? I have some thoughts: auth0.com/blog/why-broke…

GenAI goes beyond analyzing data—it creates entirely new content, unlocking new possibilities for innovation and creativity. ✨

My amazing teammates have been working on a series of short videos that explain AI concepts in simple terms: "AI in a Minute." The first episode introduces LLMs. Enjoy! youtube.com/shorts/avG2QId…

Tailwind has helped so many developers bring their ideas to life, including our own teams at @auth0. 💜 We are proud to sponsor @tailwindcss and stand with their amazing team!

In a few weeks, I'll be speaking at @swetugg Stockholm 2026! 😎 Join me to learn how to secure .NET RAG pipelines swetugg.se/stockholm/2026…

Stack Overflow has seen the number of monthly questions on its platform collapse from 300k to ~0 since launch of ChatGPT. But annual revenue is acrually up 2x over that span to $115m. How? It has licensed its back-catalog of human answers to AI labs and created an enterprise product called “Stack Internal”, a GenAI tool powered by millions of its Q&A (currently used by 25,000 companies).

We have to remember that what we observe is not nature herself, but nature exposed to our method of questioning. -- W. Heisenberg (Physics and Philosophy, 1958)

In mathematics, silence can be the most beautiful proof.

In standard OAuth 2.0, security decisions are often left to the individual implementer, which not always is the best for for high-stakes data. FAPI mandates a secure-by-default configuration to protect sensitive personal data and remove dangerous options auth0.com/blog/fapi-for-…