News for hackers. Stuff that matters.
Re:Easy to use OpenID Connect client and server library writ... by jonbake on Saturday December 02, 2023 @08:17AM (#38498419)
I argue that the complexity you are describing is inherent in any solution where multi-level sessions are present-- whether the auth mechanisms is OIDC, SAML, or something bespoke. Beyond social logins, there are use cases where multi-level sessions are required. One example is delegating authentication to another IdP. It's possible to use a OIDC client and configure the IdP to not create a session if multi-level sessions are not required.
Re:Easy to use OpenID Connect client and server library writ... by kjuulh on Saturday December 02, 2023 @09:06AM (#38498687)
Fully agree if you need the session. Then yeah some kind of delegation/abstraction is required. Especially for social/3rd party login.

The missed I've seen is simple that oidc was used on multiple levels to facilitate a login flow and the sessions discarded afterwards