News for hackers. Stuff that matters.
Re:Open Letter from the OpenID Foundation to Apple Regarding... by user5994461 on Saturday June 29, 2019 @03:38PM (#20314355)
I've had providers with blackbox tokens. Basically a random string that has to be passed to the /userinfo endpoint to retrieve the user claims.

I've had providers with the id_token and access_token being the same value. Other where they were different values. One that didn't support refresh_token at all.

Then a variety of screw ups where the required claims in the JWT tokens are missing or incorrect.

It's wild really. It always takes a bit of work to integrate any OpenID Connect provider. Most libraries only care to handle Google or Facebook login.

There are no comments on this comment yet.