Reputation: 46940
Does OpenID Connect standardize the OAuth 2 Authorization Endpoint? IIUC the OAuth spec allows providers to vary the endpoints, so just curious if OpenID Connect locks it to a specific URI value?
Upvotes: 1
Views: 79
Reputation: 2409
No it doesn't. But what it does do, is specify how to discover the URL of the correct endpoint, using:
GET /.well-known/openid-configuration HTTP/1.1
And then pick the authorization_endpoint
. Here and here are two real world examples.
Upvotes: 3