OIDC Flows Overview

In this lesson, we'll explore the main flows (or grant types) used in OpenID Connect (OIDC). These flows define how your application (the Client) interacts with an OpenID Provider (like Google or Auth0) to get identity information about a user.

OIDC builds directly on top of OAuth2, so these flows will look familiar if you've studied OAuth2 grant types.

Remember, OIDC is an identity layer built on OAuth2. This means it reuses OAuth2's authorization flows, but with a crucial addition: the ID Token.

• ID Token: A JSON Web Token (JWT) containing information (claims) about the authenticated user.
• The choice of flow determines how this ID Token (and an Access Token) is delivered to your client application.