6 ms·
Reading the user's profile information _is_ the delegated action. OAuth providers were already doing this prior to OIDC but in incompatible ways. OIDC standardi
by mdavidn 2y ago
Reading the user's profile information _is_ the delegated action. OAuth providers were already doing this prior to OIDC but in incompatible ways. OIDC standardized how that information is requested and returned.
- tptacek 2y agoNo, the whole point of OIDC is that permission to read your profile is not semantically the same thing as authenticated sign-on.