#OpenID Connect
6 articles
OIDC Logout and Security Event Token (SET)
Explains OpenID Connect Front-Channel Logout and Back-Channel Logout, and how the Security Event Token (RFC 8417 SET) enables session revocation and event notification.
OpenID Connect Discovery and Metadata: Auto-Configuration and jwks_uri Key Retrieval
Explains the role of the OpenID Connect ID Token and how Discovery (OpenID Connect Discovery / RFC 8414 AS Metadata) enables auto-configuration and public key retrieval, including key rotation via jwks_uri.
A Book to Understand Attacks and Countermeasures on OAuth and OIDC (Redirect Attack Edition)
A review of a book that organizes attacks and countermeasures on OAuth and OIDC (Redirect Attack Edition). It gently organizes the basic security of OAuth and OpenID Connect from the angle of attacks and defenses, using redirect-related attacks to help you grasp the essentials.
Resources for Catching Up on OAuth2 and OIDC
Explore OAuth2, OIDC, JWT, and authentication standards through comprehensive specifications, books, and implementation guides.
A Book to Understand the Differences Between OAuth, OAuth Authentication, and OpenID Connect
A review of a book that helps you understand the differences between OAuth, OAuth authentication, and OpenID Connect. It clearly sorts out these easily-confused concepts for beginners, offering a starting point for understanding the role and proper use of each.
Basics of Authentication and Authorization
Learn authentication and authorization fundamentals: identification, RBAC, ABAC, credential types, SSO, SAML 2.0, OAuth 2.0, and OpenID Connect with practical context.