External resources - Authentication

Relevant specifications

• The OAuth 2.0 Authorization Framework
• The OAuth 2.0 Authorization Framework: Bearer Token Usage
• OAuth 2.0 Token Exchange
• OpenID Connect Core 1.0
• OpenID Connect Dynamic Client Registration 1.0
• User-Managed Access (UMA) Profile of OAuth 2.0
• JSON Web Token (JWT)
• JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants
• Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants

• Authentication Method Reference Values

Relevant implementations

• Keycloak Documentation

  • Keycloak - Securing Applications and Services Guide

• https://www.baeldung.com/spring-security-openid-connect

• https://github.com/jaredhanson/passport

  • https://github.com/panva/node-openid-client

Other Resources

• https://medium.com/@robert.broeckelmann/saml2-vs-jwt-understanding-oauth2-4abde9e7ec8b
• https://medium.com/@robert.broeckelmann/understanding-openid-connect-series-37c93d25e92b