The OpenID Connect Handbook

SHARE ON

Über dieses E-Book

OpenID Connect is the de facto standard for handling authentication in the modern world. From traditional web applications to single-page apps to native applications, OpenID Connect provides a template for interoperability that makes it easy to incorporate identity management seamlessly and securely. Learn how this standard works and how you can leverage it to enhance user experience and security today.

Introduction
1. A Word on Entity and Identity
2. Authentication vs. Authorization
3. Recap
OpenID Connect Introduction
1. Authentication Protocols in a Nutshell
2. How OpenID Connect Works
3. OAuth 2.0 Overview
4. OpenID Connect Use Cases
5. Recap
OpenID Connect in Action
1. Creating an Auth0 Account
2. Prerequisites
OpenID Connect and Traditional Web Applications
1. OpenID Connect and the Authentication Flows
2. Bootstrapping the Project
3. Register a Regular Web App with Auth0
4. Fetching Information from the Discovery Endpoint
5. Initiating the Authentication Process
6. Handling the Authentication Callback
7. Requesting More Information About Users
8. Using SDKs to Authenticate Users
9. Recap
Traditional Web Apps and the Delegated Authorization Flow
1. The Authorization Code Flow
2. Spinning Up a Resource Server
3. Requesting Delegated Authorization
4. Using SDKs to Request Delegated Authorization
5. Recap
OpenID Connect and Single-Page Applications
1. The Authentication Dance for SPAs
2. Register a Single-Page Application with Auth0
3. Bootstrapping the Project
4. Integrating SPAs with OIDC Providers
5. Integrating SPAs with OIDC Providers – the Easy Way
6. Recap