OIDC on OAuth 2.0

 TIL : most diagrams of OIDC are horrible, and this is quite accurate by itself : RFC 6749, The OAuth 2.0 Authorization Framework

OIDC, proposed in 2014, finally made ISO in 2024

Related :

• RFC 6750, The OAuth 2.0 Authorization Framework: Bearer Token Usage
• RFC 7515, JSON Web Signature (JWS)
• RFC 7516, JSON Web Encryption (JWE)
• RFC 7517, JSON Web Key (JWK)
• RFC 7519, JSON Web Token (JWT)
• RFC 7033, WebFinger
• RFC 9101, The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)
• RFC 9126, OAuth 2.0 Pushed Authorization Requests (PAR)