OIDC: adding login
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
tell OAuth 2.0 and OpenID Connect apart.
Planned topics
- OIDC (OpenID Connect) is a thin layer on top of OAuth 2.0 that adds login.
- It adds an ID token (a JWT) that tells the client who logged in.
- The ID token is for the client app. Never send it to an API as an access token.
- OIDC also adds a
userinfoendpoint and standard scopes likeopenidandprofile. - OAuth: "what may this app do?" OIDC: "who just logged in?"
Draft outline details
Demonstration
a table: access token vs ID token: audience, purpose, who reads it.
Check your understanding
Which token proves who logged in, for the client?
Show answer
The ID token.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.