OpenID Connect Core 1.0

1. Overview

   OpenID Connect as an identity layer on top of OAuth 2.0.

2. Authentication

   Flow choices: authorization code, implicit and hybrid.

3. Authorization code flow

   Authentication request, token request and ID Token retrieval.

4. ID Token

   Required claims iss, sub, aud, exp, iat and nonce.

5. ID Token validation

   Signature, issuer, audience, expiry and nonce checks.

6. UserInfo endpoint

   Fetching claims about the end-user with an access token.

7. Scopes and standard claims

   openid, profile, email, address and phone scopes and claim sets.

8. Authentication request parameters

   prompt, max_age, login_hint, id_token_hint and acr_values.

9. Refresh tokens and offline access

   offline_access scope and refresh token handling.

10. Provider discovery metadata

    .well-known/openid-configuration and issuer metadata fields.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.