OpenID Connect and JWT: End-user Identity for Apps and APIs (API-University Series Book 6)

I simply love this book. I had the pleasure to read also the one dedicated to OAuth 2 which I also recommend. In this book I like how the author address the topic by proving scenario and hypothetical solutions and also the clarity of how each flows is explained with diagrams. The book is structured in a very logical way, you will also find sections with questions/answers, saving you time from searching on the web. Very detailed is also the description of the claims in each type of token and how they should be created ; same for scopes. Section like ID Token Validation were simply a piece of cake for me for writing tests case and for creating our test framework. I do recommend this book , it’s around hundreds of pages and you will find all that you need if you are thinking to implement openId connect for your authentication system.

The author provides a fast and dry intro to the key concepts which are presented programming language neutral. This makes the material more accessible. Having this overview prepares the reader for diving deeper into OpenID Connect, ideally by writing some code.The only reason I didn't give five stars: The book is not only fast and dry, in fact its style is bone dry and at times I felt I had to force myself to continue reading. I'm glad, though, I did.

This is a very detailed look at the topic of OpenID Connect and JWT. Tightly focused, it is an excellent reference.

This is a great book give me overview of authentication and enough details for OpenID

I think it covers the topic well. A+

OpenID Connect by Matthias Biehl covers a hard topic using a guide which uses easier to understand terms. I am not well versed in technology but this guide at least makes it start to make some sense to me. I believe that if you are into technology especially as a software engineer or programmer this is a guide that would help make it easier. It was interesting to read and realize how complex technology is.

This book is a very thorough guide on a difficult subject. Matthias does a great job breaking down what actors are in OpenID Connect and the different endpoints that are specified by the OpenID Connect Specification. There is an in-depth analysis of Json Web Tokens as well as all of the OpenID Connect Flows such as the Authorization Code Flow, Implicit Code Flow, and Hybrid Code Flows. I would highly encourage any software engineer wishing to understand OpenID Connect in greater detail to check this book out.

A useful reference guide for anyone working with OIDC and/or OAuth

Livro muito bom. para quem é iniciante . Tem vários exemplos práticos o que ajuda na compreensão deste protocolo. Recomendo.