Background reading

The following set of references on OpenID Connect and OAuth2 may be useful background reading for readers unfamiliar with these standards:

• OpenID Connect Core specification
• OAuth2 Framework specification (RFC 6749)
• OAuth2 Bearer Token Usage (RFC 6750)
• Deep Dive into OAuth2 and OpenID Connect
• Scopes and Claims in OpenID Connect

Developer tools

• https://www.getpostman.com/
• https://jwt.io/

Glossary

OIDC Provider

OIDC Client

Access Token

Authentication Context

Authentication Context Class

BankID

Claim

Endpoint

Identity Provider (IDP)

ID Token

JWT

JWS

JWE

Protected Endpoint

PSD2

Relying Party

Resource Owner

Protected Resource

Resource Server

Scopoe

Subject Identifier

TINFO

Userinfo endpoint

XID