System Design · Middle · Question 16 of 75
How does OpenID Connect differ from OAuth 2.0?
- ✓Correct answer: OIDC adds authentication to OAuth: an ID token with user data
- 2OIDC is an obsolete version of OAuth that is no longer supported
- 3OIDC encrypts data while OAuth transmits it in the clear
Explanation
OAuth 2.0 is a protocol for delegating access to resources ("let this app read my calendar"); it doesn't say who the user is. OIDC, built on top of it, standardizes sign-in: ID token (JWT), userinfo, discovery. "Sign in with Google" is OIDC.