OpenID Connect explained
The identity layer on top of OAuth 2.0: what OIDC adds, the ID token and its claims, the discovery document and JWKS, scopes like openid and email, and how "Sign in with" buttons actually prove who you are.
CodexBash, , 5 min read
OAuth 2.0 was designed to answer one question: may this application act on my behalf? It was never designed to say who you are. Yet "Sign in with Google" and "Sign in with Microsoft" are built on it. The piece that makes that work is OpenID Connect, a thin, standard layer that adds identity to OAuth. This article explains what it adds and how an application uses it to sign people in safely.
Sign in to read the rest
The whole 5 minute article is free with an account, along with every problem, lesson and tutorial. No card.