Simplified (with spring)

Terminology

OIDC

  • it is a protocol based on OAuth2.0

  • Acts as an identity layer

Access token - used to verify whether use if authorized to access the resource

ID token - used to verify user information and identity of user

Realm is like a namespace (isolation unit)

Last updated