Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-124334

[OAuth OIDC] Qt OAuth2 for OpenIDConnect id_token acquisition

XMLWordPrintable

      OpenIDConnect (OIDC) is a flow used for authenticating users. This is distinct from authorization; the goal of authorization is to give a permission to do something, where as with authentication the goal is to identify the user reliably.

      OIDC is a light layer on top of OAuth2 flows. As such, qtneworkauth module doesn't provide out-of-the-box support for OpenID Connect flow. But since it's a light layer on top of OAuth, OIDC flows can be implemented with reasonable effort.

      The scope of this task is to make it easier to acquire the id_token. This task does not include validating the token (signature verification, and if encrypted, decryption) or other OIDC concepts such as endpoint discovery or userinfo endpoint usage. The received id_token can be used as an opaque token similar to access token, and also since the id_token (JWT) is a JSON object, reading the it's fields should be easy.

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

            vuokko Juha Vuolle
            vuokko Juha Vuolle
            Vladimir Minenko Vladimir Minenko
            Alex Blasche Alex Blasche
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:

                There are no open Gerrit changes