CodeParkAn authentication layer: an ID token describing who logged in, plus a userinfo endpoint
OIDC (OpenID Connect) adds an authentication layer: it tells the client who logged in.
OAuth 2.0 is delegated authorization. An access token lets a client call an API. But the access token isn't meant to tell the client who the user is.
OIDC makes this standard with three things:
• the openid scope
• a signed ID token: a JWT with iss, sub, aud, exp and nonce
• the userinfo endpoint
Read more