OAuth 2 access_token vs OpenId Connect id_token

前端 未结 4 2033
栀梦
栀梦 2020-12-05 09:46

Although I have worked with OAuth 2 before, I am a newbie to Open ID Connect.

Reading the tutorials and documentations I have come across both access_token<

4条回答
  •  醉话见心
    2020-12-05 10:19

    Another angle to provide an answer:

    id_token

    • An id_token is a JWT - make note of that!
    • It contains claims about the identity of the user/resource owner
    • Having a valid id_token means that the user is authenticated

    access_token

    • An access_token is a bearer token
    • A bearer token means that the bearer can access the resource without further identification
    • An access_token can be a JWT (see Appendix point 1.) or opaque

    If you want to read more: Types of tokens in oidc and oauth

提交回复
热议问题