4 ms·

So no mention in the article of Open ID Connect?

• ForHackernews 11y ago
  It's even more inexcusable because half of what he's complaining about (id_tokens, JWT, aud, etc.) is actually OpenIDConnect and isn't even part of the OAuth2 spec.
  • rocha 11y ago
    It seems like the author doesn't realize that. OpenID Connect fills the specification holes in OAuth 2.0 that he is complaining about. If he had used an OpenID Connect library, his life would have been a lot easier.
• jakeway 11y ago
  No there was no mention. Plus, Open ID Connect is built on top of OAuth, so I don't think the author is a big fan of connect either.