Tag: OpenID Connect

OpenID Connect as the identity layer on OAuth 2.0, and provider discovery through .well-known metadata.

• OAuth 2.0 Server Discovery with .well-known Metadata

  25 Apr, 2020

  • 8 min read

  How OAuth 2.0 clients discover endpoints using Authorization Server Metadata (RFC 8414) and OpenID Connect Discovery, with real .well-known examples.

• OAuth 2.0 Explained: Roles, Grants, Tokens and Extensions

  19 Apr, 2020

  • 24 min read

  A complete map of OAuth 2.0: roles, grant types, why implicit and password grants are deprecated, token types, introspection, revocation, DCR, OIDC and UMA.