OAuth 2 access_token vs OpenId Connect id_token

前端 未结 4 2018
栀梦
栀梦 2020-12-05 09:46

Although I have worked with OAuth 2 before, I am a newbie to Open ID Connect.

Reading the tutorials and documentations I have come across both access_token<

4条回答
  •  失恋的感觉
    2020-12-05 10:40

    Originally, OAuth and OpenId are designed for different purpose: OpenId for authentication and OAuth for authorization. OpenId Connect is a unification of the two and serves for both, but does not change their original functionalities. Keeping that in mind, you should be able to find out yourself. ;-)

    The id_token is used to identify the authenticated user, e.g. for SSO. The access_token must be used to prove access rights to protected resources, e.g. for the userinfo endpoint in OpenId Connect.

提交回复
热议问题