OpenID Connect - Basics

preview_player
Показать описание
This video provides a very first step into OpenID Connect. It covers basics only and explains the main difference to OAuth 2.0. This should be helpful to anyone who is new to this topic.
OpenID Connect is generally needed as soon as an application should not only have access to a protected resources but should also know about the current user (resource_owner).
Links to start reading about it:
Рекомендации по теме
Комментарии
Автор

Thank you! A very good explanation to begin to learn about OpenID

JesusEnriqueFrancoMartinez
Автор

Very informative, but still looking forward to see more explanation or extension on OIDC...👌

adityagtm
Автор

You passed 'openid email profile' in the request when obtaining the Id token. Does this mean when you decode the Id token, you will see the users email as a claim?

abulsyed
Автор

Great Content. Thanks for making these videos, I really appreciate it. Looking forward for more.

kaankafka
Автор

at 9:45, yes the token is digitally signed, but only the Authorization server can verify if the signature is correct, the client can't make that verification.

grandsheng
Автор

excellet video on such a complex topic .... loved it

avimehenwal
Автор

Hi, thanks for the explanation.
One thing that I didn't understand yet is how an API server can know that the access-token sent by a client's request header is valid. It should authenticate itself into the same identity provider?

cvgaviao
Автор

Sir, did you write any book on this topics, if yes could you please share the link ?

kousheralam
Автор

u should have given some more examples of open id

manideepkumar