George Fletcher
- Long-time contributor to OpenID Connect and OAuth standards
- Identity architecture leadership at large consumer platforms
- Active in the OpenID Foundation community
Bio
George Fletcher is a veteran identity architect and standards contributor, with deep involvement in OpenID Connect and OAuth over many years. He has led identity architecture at large consumer platforms and remains active in the OpenID Foundation community, bridging the gap between protocol design and large-scale production identity.
Profile built from public OpenID Foundation and standards records.
Where their work shows up
Fletcher's architecture work spans the practical side of OpenID Connect deployment at scale: token lifetimes, claims design, and the federation patterns that hold up across large consumer estates. See OAuth vs OIDC.
Related on Start with Identity
- GlossaryAccess Token
A short-lived credential a client presents to a resource server to access protected data. Access tokens are typically opaque or JWT-formatted, with lifetimes me
- GlossaryAgentic Identity
Identity for autonomous AI agents that act on a user's behalf, call APIs, and chain tools. Requires scoped, delegated, auditable, and revocable credentials rath
- GlossaryAuthorization Code Flow
The recommended OAuth 2.0 flow for apps with a user: the app receives a short-lived code, then exchanges it for tokens from a back channel. Combined with PKCE f
- CVEDrupal Simple OAuth/OIDC auth bypass via an alternate path
Drupal Simple OAuth / OIDC 6.0.0 through 6.0.6 allowed authentication to be skipped on an alternate path. Patched in 6.0.7.
- CVEDuende OAuth token management mixes tokens across requests
A race in Duende's .NET OAuth token-management package could attach client A's token to client B's request. Session mix-up, not a crypto break, but it is still
- CVEOAuth 2.0 private_key_jwt audience ambiguity
A specification-level flaw in the OAuth 2.0 JWT profile: private_key_jwt audience is ambiguous, so a token minted for one authorization server can be accepted b