OIDC notes

15 Sep, 2025

OpenID Connect (OIDC) is an extension of OAuth 2.0.

OAuth 2.0 includes these four components:

1. Authorization Server -> ex: Google, Auth0, Facebook
2. Resource Server -> The protected resource (an API)
3. Resource Owner -> Person or entity who owns the protected resource
4. Client -> The person or entity wanting to access the Resource Server

OAuth is about authorization.
OIDC is about identity.

By using OpenID Connect, your Authorization Server also acts as an Identity Provider

#security