Cianplan

Level 4: Reliability, security & cloud · L4.4 Security architecture

OAuth 2.0 and OpenID Connect

Walk through the authorization-code flow and what OIDC adds.

13 min · Pro

What you take away

  • OAuth 2.0 is delegated authorization: an app gets a scoped token to act on a user's behalf, without ever seeing their password.

And 3 more inside the class, in Pro.

How the class is laid out

  1. The problem
  2. The authorization-code flow
  3. What OIDC adds
  4. Check your understanding