Comments (1)
Another case of identity tokens being sent to an API is the kubernetes API server https://kubernetes.io/docs/reference/access-authn-authz/authentication/#openid-connect-tokens, which can be configured to validate the token signature and use the ID token as a source of identity for API requests. The identity token in this instance is obtained by a client (say a kubectl plugin) and then passed as a bearer token in Authorization headers.
I even found an issue raised with the kubernetes project asking whether their use of ID tokens is legitimate, which was closed with a comment explaining that kubernetes is not a resource server wrt. the OIDC issuer.
from oauth.net.
Related Issues (20)
- OAuth Unsuccessful Response HOT 1
- Separate between self-hosted open source and Identity SaaS on `/code`
- OAuth approval screen issue HOT 1
- How to get listed in : https://oauth.net/code/ page ? HOT 3
- Collect list of companies and organizations using the Security BCP
- Issue
- non-chocolate fudge requires chocolate
- Client credentials grant clarification
- Deprecation of Password Grant flow leaves a gap in authenticating a client as its own user HOT 2
- oauth.com errata? HOT 1
- Regarding Oauth authentication, the request URL contains the security issue of redirect_uri HOT 1
- Powershell file is missing HOT 3
- Link to OAuth 2.1 draft is broken HOT 2
- How to pass end user identity in a system to system communication ?
- Export website to PDF HOT 5
- Add book
- Add RSS feed for specs / articles
- Authorization Code Grant speaks about "this flow" HOT 1
- The logo has a dent HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from oauth.net.