3 ms·
You can use your existing API tokens as the OAuth access_token. Refresh tokens are optional. None of it has to be a JWT. Doing this prevents having to suppor
by candiddevmike 3y ago
You can use your existing API tokens as the OAuth access_token. Refresh tokens are optional. None of it has to be a JWT. Doing this prevents having to support multiple API auth methods.
OIDC on the other hand...
- charles_f 3y agoThat's precisely the point. You can do those things, or you can not do them. And there are paths in the combinatorial that leave you with an open door. Re: OIDC, that's yet another one. The average dev can't tell you the difference between both - or won't even know the term OIDC and call it OAuth.