CODEWITHSUNDEEP
oauth-2.0openid-connect
Saar peer
Saar peer

Reputation: 847

Openid Connect standard way for exchanging ID Tokens

Is there any stadated way for replacing ID tokens of 2 authorization servers ?

For example, i have a service that you can login with an external ID Token but my service is also an authorization server and therefor i want to allow users exchange external ID Tokens with my service ID token.

Upvotes: 1

Views: 54

Answers (1)

Max Ivanov
Max Ivanov

Reputation: 6561

OAuth2 specification defines following grant types:

  • authorization code
  • implicit grant
  • resource owner password credentials
  • client credentials

But it also supports defining additional grant types where required:

New authorization grant types can be defined by assigning them a unique absolute URI for use with the "grant_type" parameter.

Per specification, new endpoints, parameters, response types and error codes may be defined to support the grant type extension.

When implemented, a client can make a request providing new grant type:

POST /token

grant_type=id_token&id_token=external-token&...

which would validate incoming token and issue your service's token.

Here are some links from oauth servers supporting custom grant types for inspiration:

Upvotes: 1

Related Questions