Background reading
The following set of references on OpenID Connect and OAuth2 may be useful background reading for readers unfamiliar with these standards:
- OpenID Connect Core specification
- OAuth2 Framework specification (RFC 6749)
- OAuth2 Bearer Token Usage (RFC 6750)
- Deep Dive into OAuth2 and OpenID Connect
- Scopes and Claims in OpenID Connect