Software Architecture Fundamentals - Episode 16 - OAuth 2 and OpenID Connect

Are you a software developer who wants to understand better software architectures? In this stream, we discuss all the needed software architecture basics you need to know.

Don't forget to follow me on Twitter @laurspilca or LinkedIn for more posts and discussions.

[rabaababa]

My gosh, this is excellent. Your chanel has a perfect content, thanks a lot for your work, i appreciate it. :)

[Boria]

Hi. As always wery interesting information. If I corretly understand keycloak and springs auth server doing the same things.
Layrentiu can you explain please what is the main difernce between keycloak and spring authorization server?
If I using spring stack what should I preferr?

[rabaababa]

When we talk about openId (authentication) method, we declare scope=openId, then we got tokeId, which contains information about user, and this token shows that user was/is authenticated. BUT, in this case we are forced to use scope=openId, so i miss the opportunity to have access (authorization) to modify for example email by setting scope=editEmail. DESPITE this, i know that by setting scope=openId it returns also accessToken, which indicates(i assume) that i have authorization to do somethink, but WHAT exaclty? (i did not specify scope=editEmail what would indicate that in accessToken that i have access to modify email)

Also, so i want to be authenticated in application, i have to send request with scope=openId. And if i want to have access(authorization) to some data, shoudn't i send another request but this time for exapmle with scope=editEmail? I feel like im somethink missing out..

Can you clarify if I'm missing somethink, or wrote somethink wrong?