OpenID Connect and JWT: End-user Identity for Apps and APIs (API-University Series Book 6)

Pay with

About OpenID Connect And JWT: End-user Identity For Apps

Do you want to know how OpenID Connect works?Exploring how OpenID Connect works in detail is the subject of this book. We take a bottom-up approach and first study all the elements (actors, endpoints, and tokens) of OpenID Connect. This puts us in an excellent position for the second step: to understand the various OpenID Connect Flows - how the actors, endpoints, and tokens are put together to transmit identity claims securely.Do you wonder why there are several OpenID Connect flows?Whether we use OpenID Connect from a mobile app, a script in a browser or from a secure backend server, there is an appropriate OpenID Connect Flow with the right tradeoffs in security, functionality, and convenience for each of these scenarios. This book helps you to choose the right one.Do you think that these OpenID Connect Flows are confusing?You are not alone; the OpenID Connect Flows tend to get confusing. However, with this book, we make it clear and easy to understand: We visualize these flows and show how to choose the flow that is appropriate for a given scenario. A picture says more than a 1000 words - that is why we explain the OpenID Connect Flows using easy to understand sequence diagrams.Do you want to understand how JWT works?This book explains what a JSON Web Token (JWT) is, how it is used in OpenID Connect, how it is constructed, what data it contains, how to read it, and how to protect its contents.Do you wonder why there are so many tokens in OpenID Connect and how to use them?There are JWT, JWS, JWE, access tokens, refresh tokens, identity tokens, and authorization codes. This book helps you to make sense of them all. Using examples, we explore how the tokens are used, constructed, signed, and encrypted.Why is OpenID Connect so popular?If used in the right way, OpenID Connect is powerful, and everyone loves it: