OAuth 2.0 / OpenID Connect examples

Client and server-side code examples using this SDK.

OAuth 2.0

Core:

• Authorisation request
• Token request
• Protected resource request
• Access token introspection

Extensions:

• Client registration
• Proof Key for Code Exchange (PKCE)
• DPoP sender-constrained access tokens
• JWT-secured authorisation request (JAR)
• JWT-secured authorisation responses (JARM)
• Token exchange
• Request object endpoint (JAR, FAPI), obsoleted by PAR

OpenID Connect

Core:

• Authentication request
• Token request
• ID token validation
• UserInfo request

Extensions:

• OpenID provider configuration request
• Client registration
• Logout tokens
• Identity Assurance / eKYC
• Federation
• Client-Initiated Back-channel Authentication (CIBA)

TLS, X.509 certificate and other utilities

• Self-signed client X.509 certificate for mTLS
• HTTPS request with custom trust store for server certificates
• HTTPS request with client certificate