3 ms·
I’m embarrassed to admit but I’ve spent far too much time reading the minutiae of OAuth2 and OpenID and failing to grasp the big picture until now. This was rea
by tybit 7y ago
I’m embarrassed to admit but I’ve spent far too much time reading the minutiae of OAuth2 and OpenID and failing to grasp the big picture until now. This was really well done.
- FranOntanaya 7y agoEnd of the day, an Oauth2 user is just an user admin that creates a child user account for each app, with restricted permissions. Then the app logins with "their" username (client ID) and password (client secret).
- reverentgeek 7y agoHey! This is David, the author. I'm so glad to hear this post helped you to better understand OAuth and OIDC. Thank you for the feedback!