I’m trying to follow OpenID Connect best practices . For the simple scenario of calling API from application the OpenID Connect suggest to pass the Access Token (which is not included user identity), and if the API in some points need the user identity it should call /userinfo endpoint of Open…

I can share some (hopefully) informed views on this subject, but please do take them with a grain a salt and question stuff you disagree with or you don’t consider clear enough. When it comes with software the devil is on the details and in the security landscape it’s even more true so you need to c…

How to access identity info in API

Get Help

system Closed April 6, 2019, 3:48pm 9

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
tokenInfo api is not working Get Help id_token	4	4447	July 26, 2019
What is the correct way to add custom claims to id_tokens and the /userinfo endpoint and get the complete user profile? Get Help id_token , userinfo , authentication_api	2	13431	March 2, 2018
Using access_tokens and id_tokens together Auth0 Get Help jwt , auth0 , login	3	3420	September 3, 2019
Forwarding identity_token to resource server. Get Help tokens , openidconnect , oauth2	2	4210	December 17, 2018
Authorize your APIs by logged in User Get Help user , authorize , authorize-endpoint , log-in	5	4196	March 2, 2018

How to access identity info in API

Related topics