I've been cooking on this post for a bit, but with the cyber security events of this week I had to ship it: Long-live static credentials must die. We never want to rotate API keys again. Turns out only 8% of cloud and SaaS vendors support secure alternative. This is our call to action to change this AND our commitment to do our part: - We are requiring vendors on our marketplace to support OIDC - We shipped @shadcn components to make it easier to ship OIDC configuration - We are expanding OIDC support on our own platform The last generation got the web from HTTP to HTTPS. It is on us to move past API keys. https://t.co/g3r5jk79U8