oauth-2-0-and-openid-connect-module

oauth 2 0IETF RFC 6749 authorization framework enabling third-party application access to protected resources without s

openid connectIdentity layer on top of OAuth 2.0 (OIDC 1.0, OIDC Core spec) adding ID tokens as JWTs, userinfo endpoint, and

access tokenOAuth 2.0 credential presented to the resource server; opaque to clients but contains or references authorizat

claims parameterOIDC parameter requesting specific claims in id_token or userinfo response; server may return subset based on

claims request objectStructured JSON object within the claims parameter containing claim preferences for id_token and userinfo endp

token endpointOAuth 2.0 endpoint accepting authorization_code or other grants and returning access_token, refresh_token, and

id tokenOIDC JWT containing subject identifier (sub), issuer, audience, expiration, authentication event metadata, and

refresh tokenOAuth 2.0 credential used to obtain new access tokens without re-prompting the resource owner; long-lived and

resource serverServer hosting protected resources; validates incoming access tokens and returns resources only when tokens ar

acr claimClaim in the id_token containing the ACR actually used by the OP to authenticate the user, returned to the RP

authorization serverOAuth 2.0 server that authenticates the resource owner, obtains consent, and issues access tokens and optional

bearer tokenToken type defined in RFC 6750; any party possessing the token may use it; security relies on transport TLS an

claims policy enforcementIdentity provider rule set determining which claims can be released to a given relying_party based on client r

expires inInteger seconds indicating access token lifetime; returned alongside access_token in token response.

introspection endpointRFC 7662 endpoint allowing resource servers to validate access tokens; returns active status, scope, expiry, a

access token introspectionRFC 7662 mechanism by which a resource_server POSTs the access_token to the authorization_server introspection

acrAuthentication Context Class: a statement about the authentication method used, the assurance level of the aut

acr requirementA requirement statement specifying which ACRs the RP considers acceptable and in what priority order

acr valuesOIDC authentication context class reference values requested by RP; ordered list the OP attempts to satisfy (e

authorization endpointOAuth 2.0 endpoint where the resource owner authenticates and grants consent; returns authorization_code via r