Timeline for Why use OpenID Connect instead of plain OAuth2?
Current License: CC BY-SA 4.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 8, 2019 at 9:34 | comment | added | Mathias Conradt | This answer is absolutely correct. Just wanted to point one minor thing out: "However, if you want the whole set of information, you still need the access_token to request the OpenID provider to get the userinfo" >> this isn't necessarily the case depending on the authorization server/broken used: it's also possible to already include the full profile inside the ID token = JWT token, or even any other information using custom claims; an example being auth0.com/docs/tokens/id-token#add-custom-claims. Then you don't need to do the /userinfo request anymore. | |
| S Aug 21, 2018 at 23:24 | history | suggested | slolife | CC BY-SA 4.0 |
fixed grammar/spelling
|
| Aug 21, 2018 at 18:20 | review | Suggested edits | |||
| S Aug 21, 2018 at 23:24 | |||||
| S Jan 7, 2016 at 20:58 | history | edited | Vilican | CC BY-SA 3.0 |
Fix typos. [+ some more fixes]
|
| S Jan 7, 2016 at 20:58 | history | suggested | CommunityBot | CC BY-SA 3.0 |
Fix typos.
|
| Jan 7, 2016 at 20:55 | review | Suggested edits | |||
| S Jan 7, 2016 at 20:58 | |||||
| S Jan 21, 2014 at 14:23 | review | Late answers | |||
| Jan 21, 2014 at 14:50 | |||||
| S Jan 21, 2014 at 14:23 | review | First posts | |||
| Jan 21, 2014 at 15:10 | |||||
| Jan 21, 2014 at 14:12 | history | edited | Nereis | CC BY-SA 3.0 |
added 21 characters in body
|
| Jan 21, 2014 at 14:07 | history | answered | Nereis | CC BY-SA 3.0 |