OAuth / OpenID Connect (OIDC) Demo
Introduction
OAuth is an industry-standard authorization framework that lets an application access a user’s resources on another service with the user’s permission and on their behalf. Authorization determines which resources the application can access and what actions it can perform.
For example, an application can use OAuth to request permission to:
- read a user's calendar or files
- access a user's contacts or photos
- perform actions through an API, such as uploading a file on the user’s behalf
OpenID Connect (OIDC) extends OAuth 2.0 by adding an identity layer that allows an application to authenticate a user. One of its main benefits is that it standardizes the authentication exchange between the application and the identity provider - both the information requested and the identity information returned. This information is represented as claims, such as a user’s unique identifier, name, and email address.
Demo
This demo requires a Google account. If you don’t have one or prefer not to use your own account, you can alternatively view an example of the kind of data returned without signing in.
Click the button on the right to start a Google OpenID Connect sign-in flow. Your browser will be redirected to Google. Google will authenticate you if necessary and may ask you to consent to sharing the requested identity information with this demo. Afterward, Google will redirect you back to this application, where you can view the identity claims and OAuth/OIDC information returned.
Privacy and security: Your credentials are entered only on Google's site and are never shared with this demo. The demo requests only basic identity information. After exploring the returned data, you can sign out, reset the demo, or revoke the demo's access.