دانلود کتاب آموزش OpenID Connect در عمل – نسخه 7

OpenID Connect is a standard developed by the OpenID foundation, on top of OAuth 2.0 specification (https://tools.ietf.org/html/rfc6749). OAuth 2.0 is an authorization framework for access delegation. You can also call OpenID Connect an identity layer built on top of OAuth 2.0.4 To understand OpenID Connect in detail, having a good understanding of OAuth 2.0 is a must. The chapter 2 of the book covers OAuth 2.0 essentials that you need to know to follow this book. Also, if you’d like to delve deep into OAuth 2.0, we recommend the books, OAuth 2.0 in Action by Justin Richer and Antonio Sanso (Manning Publications, 2017) and Advanced API Security: OAuth 2.0 and Beyond by Prabath Siriwardena (Apress, 2019). In a typical OpenID Connect login flow, there are two main parties involved in addition to the end user: the OpenID provider and the client application. The OpenID provider manages user attributes and credentials, and lets the users log in to client applications following the OpenID Connect protocol. These client applications and OpenID provider can belong to the same organization or different organizations. When a client application comes from an outside organization from where the OpenID provider belongs to, we call that client application a third-party client application. When you log in to eBay with your Apple ID, for example, eBay is the client application and Apple is the OpenID provider. They belong to two different organizations. You can call eBay a third-party client application.