3 ms·
You probably dont need OAuth2/OIDC. While the two are very powerful protocols when used correctly, and have many advantages and use cases, the truth is that th
by vinckr 3y ago
You probably dont need OAuth2/OIDC.
While the two are very powerful protocols when used correctly, and have many advantages and use cases, the truth is that they are not always necessary. In fact, you most likely do not need them.
- https://www.ory.sh/oauth2-openid-connect-do-you-need-use-cases-examples/ https://www.ory.sh/oauth2-openid-connect-do-you-need-use-cas...
- kriops 3y agoI don't disagree, but I want to expand upon your point in a cautionary direction: Using OIDC/OAuth2 does prevent you from making several classes of rudimentary mistakes, entirely for free. The nonces and whitelists aren't there just to look pretty!