OpenID Connect
An identity layer built on OAuth 2.0 that standardizes authentication and identity claims through ID tokens and provider metadata.
Technical Context
OIDC adds identity semantics that OAuth alone does not provide. Correct validation includes issuer, audience, signature, nonce when applicable, token lifetime, and discovery/JWK handling; an access token should not be treated as an ID token.
Related Concepts
- OAuth 2.0
- ID token
- JWT
- JWK