This is the wiki home of a self-organized study group on OAuth2 and OpenID Connect (OIDC) 

References and Links

•  Recommended but not required: OAuth 2 in Action, Justin Richer and Antonio Sanso

  • Table of Contents

• OAuth 2 in Action book forum incl. errata

  • https://forums.manning.com/forums/oauth-2-in-action

• Clone the repository with the code for all the exercises in the book

  • https://github.com/oauthinaction/oauth-in-action-code

• Prerequisites for running examples:

• Node: https://nodejs.org 
• NPM: https://www.npmjs.com/ (Bundled with Node)

• Express: http://expressjs.com 

• RFCs:
  

  • https://tools.ietf.org/html/rfc6749 OAuth 2.0 framework
    

  • https://tools.ietf.org/html/rfc7591 OAuth 2.0 Dynamic Client Registration
    

  • https://tools.ietf.org/html/rfc7662 OAuth 2.0 Token Introspection
    

  • https://tools.ietf.org/html/rfc6750 Bearer Token Usage
    

  • https://tools.ietf.org/html/rfc7009 Token Revocation
    

  • https://tools.ietf.org/html/rfc7521 Assertion Framework for Client Authentication and Authorization Grants
    

  • https://tools.ietf.org/html/rfc7522 SAML 2.0 Profile
    

  • https://tools.ietf.org/html/rfc7523 JSON Web Token (JWT) Profile for …
    

  • https://tools.ietf.org/html/rfc6819 Threat Model and Security Considerations
    

  • https://tools.ietf.org/html/rfc7636 Proof Key for Code Exchange by OAuth Public Clients
    

  • https://tools.ietf.org/html/rfc6755 An IETF URN Sub-Namespace for OAuth

• Additional materials from the OpenID Workshop offered by Roland Hedberg and Rebecka Gulliksson in Denver, February 2016

•  Workshop home page: https://meetings.internet2.edu/2016-02-24-openid-connect-workshop/ 
•  Workshop code: https://github.com/rohe/openid_course 
• Course material for a course in OAuth2, JW*, OpenID Connect and UMA: https://github.com/rohe/ojou_course 

• OIDC

  • Internet2 OIDC Survey Working Group

  • OIDC Survey Working Group Final Report

  • U Chicago project to add OIDC support to the Shib IdP