OpenID Connect是否支持“资源所有者密码证书"授予?

本文介绍了OpenID Connect是否支持“资源所有者密码证书"授予?的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！ 问题描述

我以前一直在使用OAuth资源所有者凭证流程进行授权.

但是，我现在想考虑以这种方式使用openid connect进行身份验证和授权，并且想知道openid connect是否支持资源所有者凭证流.

解决方案

是的，OpenID Connect支持所有OAuth 2.0授予类型，包括资源所有者密码凭证授予和客户端凭证授予.

我们知道，授权代码授予和隐式授予是典型的三足流，包括客​​户端，授权服务器和用户之间的交互.资源所有者密码凭据授予和客户端凭据授予是两足的，这意味着客户端使用了预先授权的范围，因此无需与用户进行交互，从而无需执行典型流程中的其中一条. >

这里是参考:配置OpenID Connect提供程序以启用两足式OAuth请求

I have been using OAuth resource owner credential flow previously for authorization.

However I would now like to consider using openid connect in pace of this, for authentication and authorization, and was wondering if the resource owner credential flow is supported in openid connect.

解决方案

Yes, OpenID Connect supports all OAuth 2.0 grant types including Resource Owner Password Credentials Grant and Client Credentials Grant.

As we know, Authorization Code Grant and Implicit Grant are typical 3-legged flows including interaction between a client, an authorization server and a user. While the Resource Owner Password Credential Grant and Client Credential Grant are 2-legged which means the client uses pre-authorized scopes so that no interaction with the user is necessary, removing the need to perform one of the legs in the typical flow.

Here is a reference: Configuring an OpenID Connect Provider to enable 2-legged OAuth requests