5 min
A server that starts
Spring Authorization Server on port 9000 with OIDC, a development client and user, token policy, and discovery and JWKS endpoints.
- spring-boot
- spring-security
oidc
5 posts.
4 min
ID tokens and UserInfo
Scope-aware identity claims in the ID token and the UserInfo endpoint, and a real OIDC flow to prove them.
- oidc
- jwt
2 min
References
Every specification and document the series relies on, grouped by subject.
- oauth2
- oidc
6 min
The mental model
OAuth roles, the Authorization Code flow, PKCE, the three kinds of token, and JWT signing, before any code.
- oauth2
- oidc
5 min
The plan
What we are building, what OAuth and OpenID Connect each answer, and what this series deliberately leaves out.
- oauth2
- oidc