OIDC: إضافة تسجيل الدخول

في هذا الدرس

tell OAuth 2.0 and OpenID Connect apart.

الموضوعات المخطط لها

• OIDC (OpenID Connect) is a thin layer on top of OAuth 2.0 that adds login.
• It adds an ID token (a JWT) that tells the client who logged in.
• The ID token is for the client app. Never send it to an API as an access token.
• OIDC also adds a userinfo endpoint and standard scopes like openid and profile.
• OAuth: "what may this app do?" OIDC: "who just logged in?"