https://hsuanblog.com/tags/oidc/ Recent content in OIDC on Hsuan's Coding Blog https://hsuanblog.com/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://hsuanblog.com/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.125.7 en Thu, 03 Apr 2025 00:00:00 +0000 https://hsuanblog.com/posts/how_oidc_builds_on_oauth2_simple_guide_2025_04_03/ Thu, 03 Apr 2025 00:00:00 +0000 https://hsuanblog.com/posts/how_oidc_builds_on_oauth2_simple_guide_2025_04_03/ Introduction I’m currently building an Identity Server at my company, and it needs to support not only the OAuth2 protocol, but also OpenID Connect (OIDC), so it can integrate smoothly with other applications. When I first started learning about OIDC, I was quite confused. At first, OAuth2 and OIDC looked very similar to me. They both involve authorization servers, clients, tokens, redirects, scopes, and many familiar endpoints. But after reading more specifications and implementing the protocol step by step, I realized the key difference: