Introduction

OpenId Connect (OIDC) is an identity layer built on top of the OAuth2 protocol.

When the user authentication is required the client application initiates one of OIDC Core flows and redirects this user to OIDC provider. The user gets redirected back to the client after the authentication, with the client application receiving IdToken. If Authorization Code Flow is used then IdToken is returned as part of the follow up code to access token exchange, and if Implicit Flow is used then IdToken is returned immediately. It is very much like OAuth2 except that an extra IdToken parameter is returned.

CXF ships OIDC Provider (IDP) and Relying Party (RP) utility code to make it easy for developers to create their own custom OIDC providers or have JAX-RS applications integrated with well-known 3rd party OIDC IDPs.

This code relies heavily on CXF OAuth2 and CXF JOSE modules.

Maven Dependencies

CXF OIDC module

-

<dependency>
+<dependency>
     <groupId>org.apache.cxf</groupId>
     <artifactId>cxf-rt-rs-security-sso-oidc</artifactId>
     <version>3.1.7</version>

Modified: websites/production/cxf/content/docs/jax-rs-redirection.html
==============================================================================
--- websites/production/cxf/content/docs/jax-rs-redirection.html (original)
+++ websites/production/cxf/content/docs/jax-rs-redirection.html Wed Sep 13 15:05:52 2017
@@ -32,8 +32,8 @@
 
 
 
-
 
+
 
-
 
+