ThinkerQAQ

NOTE

OpenID Connect

Historical notes on what OpenID Connect is and how its flow differs from OAuth by adding OpenID identity information and an ID Token.

Software Architecture & EngineeringCreated Updated 1 min readhistorical

This is a historical learning note and may contain outdated or incomplete understanding.

1. What Is OpenID Connect

  • An authentication protocol.
    • OAuth is only used for authorization and does not define an authentication specification.
  • Based on OAuth 2.
    • It simply adds a standardized UserInfo Endpoint.

2. OpenID Connect Flow

  • It is the same as OAuth.md.
  • The differences are:
    • An OpenID parameter is added to the first OAuth request.
    • When obtaining the access token, an ID Token is also obtained [generally using JWT format].

3. References

Discussion

Sign in with GitHub to comment. Discussions are stored as GitHub Issues.View on GitHub