oidc– Next Generation Identity Authentication authorization protocol based on OAUTH2

OIDC (OpenID Connect), the next generation of Identity authentication authorization agreement; Current release version 1.0;

OIDC is a new authentication and authorization agreement based on Oauth2+openid integration; OAuth2 is an authorized (authorization) Open protocol, widely used in the world, but in the actual use, OAUTH2 only solves the authorization problem, does not realize the authentication part, often needs to add the additional API to realize the authentication; And OpenID, is a certification (authentication) of the agreement, both in the actual use of the process has its limitations;

The combination of the two, that is OIDC; Through OIDC, can have OAUTH2 function, also have the function of OpenID; Right...

OIDC will be the alternative (or upgrade) OAuth2, OpenID option.

OIDC the identity authentication information based on the access_token of OAuth2; Other information, such as-– and Idtoken, is obtained through public key and private key matching.

A Idtoken (base64) generated using JWT:

Eyjhbgcioijsuzi1niisimtpzci6ijm3mtc2nja0otexodeynzkwnzgifq.eyjpc3mioiixmtexiiwiyxvkijoimtexmsisimf0x2hhc2gioii4zjgxythjos 1jnwjiltqwowmtyji0ni1lmzeyzmuwyzm4nwmilcjyzwdpc3ryyxrpb24ioiixmjm0nty3ocisimv4cci6mtq2mzyymja4niwianrpijoirnl5agzoynqtu0n Lr2tptwrgmvg2dyisimlhdci6mtq2mzu3odg4niwibmjmijoxndyzntc4odi2lcjzdwiioijsc3otb2lkyyj9.hdccs8pisdwupp6eyd-9jceetj2ztscbeup Itit43gmybddiublc90ut9bxke6e3awhels3asemreftlnly09pwdcxxvhjyceixo_ Dnzqu-zqxeshzpee6d1wszucbj6yxoxmh0laba24uu3cbqsrqborsymh2_xa5q5ep66ioajrudhnxhmswel85jtl9_ H0syfrnpz9c0mru2x9yztht129o53ggqtjwqxrxlabcd1dd35dyiztagqqwdpo3gfg7yseneiq6mf2d6nibu9llaqh4stthq_ahme06qkenat_ Sxnmijn2uhw7u0e08s-59oxtoy9wint78qj5ifwjw

In the implementation of OIDC protocol, its bottom layer is based on OAuth2. Some commonly used libraries such as: JWT (https://jwt.io/), JWS; OAuth2 implementations such as Spring security OAuth, Oltu.

For more information, refer to: http://openid.net/connect/

Embrace OIDC ...