IdentityServer Flows

oauth-2.0 openid thinktecture-ident-server openid-connect identityserver3
orad picture orad · Apr 16, 2015 · Viewed 28.5k times · Source

IdentityServer supports different OpenId Connect flows that are defined in the Flows enum and set for clients. There's also samples for each type of flow and many references to them in the docs but I could not find a simple definition list of what flows are in the documentation as if they are too obvious to explain in words. But I guess they're not. Can you please tell more about the differences of these, maybe we can add that to the docs?

So what are: implicit flow, resource owner password credential flow, authorization code flow, client credentials flow, custom grant flow, and hybrid flow? Also which ones are OAuth flows and which ones are OpenID Connect flows?

Thanks!

Answer

Jawad Al Shaikh picture Jawad Al Shaikh · Apr 23, 2015

I faced the same Issue, currently the work still in progress. when I finish the documentation, I might post it here. for time being: please check the draft:

Enrich IdentityServer Documentation with OIDC and OAuth2 Flows section #73

Update: OIDC and OAuth2 Flows

Related questions

Does OpenID Connect support the Resource Owner Password Credentials grant?

I have been using OAuth resource owner credential flow previously for authorization. However I would now like to consider using openid connect in pace of this, for authentication and authorization, and was wondering if the resource owner credential flow is …

Read More
How to add custom claims to access token in IdentityServer4?

I am using IdentityServer4. I want to add other custom claims to access token but I'm unable to do this. I have modified Quickstart5 and added ASP.NET Identity Core and the custom claims via ProfileService as suggested by Coemgen …

Read More
OAuth 2 access_token vs OpenId Connect id_token

Although I have worked with OAuth 2 before, I am a newbie to Open ID Connect. Reading the tutorials and documentations I have come across both access_token and id_token where access_token is the random unique string generated according …

Read More