Authentication

OpenID Connect (OIDC)

A thin identity layer on top of OAuth 2.0. Adds an ID token (a signed JWT) so the client learns *who* the user is, not just *what* it may access. The basis of modern 'Sign in with…' buttons.

Flows

Authorization Code (with ID Token)
Authenticate a user and learn who they are. Same redirect/exchange shape as OAuth 2.0, plus the openid scope, a nonce, and an id_token JWT the client validates to establish identity.
12 steps →

Flows

Authorization Code (with ID Token)