Reputation: 445
I have been following OAuth 2.0, Open ID and now Open ID connect. They say that Open ID connect has Identity in addition to OAuth. From this, can it be inferred that it can be used for both authentication and authorization? Say I have to Integrate certain services of Youtube or Facebook into my web application, I currently use just OAuth. Instead, can I switch to Open ID connect and do the same things?
Upvotes: 1
Views: 911
Reputation: 8289
Open ID Connect is just another layer on top of OAuth. You'll still use OAuth for authorization, but now you can also perform authentication with it. It doesn't make sense to "switch to Open ID Connect", because Open ID Connect uses OAuth.
Some references:
Upvotes: 1