Advanced · Interactive lesson

OAuth 2.0 & OpenID Connect

OAuth 2.0 is the protocol behind "Sign in with Google/GitHub/Slack" and every third-party integration that acts on your behalf. It separates who you are (identity) from what you allow (authorization). OIDC (OpenID Connect) is the identity layer built on top.

Step 1 of 6

The three actors

Client
Your app that wants access.
Auth Server
Google, GitHub, etc. Issues tokens.
Resource Server
The API the tokens unlock.
Up next
Single Sign-On (SAML)
Continue →