buzzfeed/sso
sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services
Recommended between 2026-03-12 and 2026-03-12. Last pushed 2026-06-19.
▲ 1 recommend · ▼ 0 criticisms
What hackers say
“Or the buzzfeed SSO proxy, which lets you do the same via an OAuth2-dance at the frontend”
— captn3m0, 2026-03-12 · original comment on Hacker News ↗
show original comment
This problem+solution, like many others in the agentic-space, have nothing agent-specific. Giving a "box" API keys was always considered a risk, and auth-proxying has existed as a solution forever. See tokenizer[0] by the fly.io team, which makes it a stateless service for eg - no database or dashboard. Or the buzzfeed SSO proxy, which lets you do the same via an OAuth2-dance at the frontend, and a upstream config at the backend which injects secrets: https://github.com/buzzfeed/sso/blob/549155a64d6c5f8916ed909cfa4e340734056284/docs/sso_config.md?plain=1#L10-L25 . [0]: https://github.com/superfly/tokenizer
Badge for your README
[](https://hackerrepos.org/repo/buzzfeed/sso)