OAuth2 & OIDC See | AI Wisdom

OAuth 2.0 is a delegation framework — it lets users grant apps limited access to their resources without sharing passwords. OIDC (OpenID Connect) adds identity on top: an ID Token with user profile claims. Microsoft Entra ID implements both. The Authorization Code + PKCE flow is the only recommended flow for public clients in 2026.

The pipeline

Each stage in order — click any step to read what it does.

Interactive Pipeline Flow

AuthorizationToken IssuanceIdentity (OIDC)

🔀 Auth Request — Client → AS

Auth Request: client redirects user to /authorize with client_id, response_type=code, redirect_uri, scope, state, and PKCE code_challenge.

Architecture diagrams

OAuth2 flows comparison — which to use for each client type in 2026.

Loading diagram...

The pipeline

Each stage in order — click any step to read what it does.

Interactive Pipeline Flow

AuthorizationToken IssuanceIdentity (OIDC)

🔀 Auth Request — Client → AS

Auth Request: client redirects user to /authorize with client_id, response_type=code, redirect_uri, scope, state, and PKCE code_challenge.

Architecture diagrams

OAuth2 flows comparison — which to use for each client type in 2026.

Loading diagram...

Authorization Code + PKCE is the modern secure standard for all client types.

The pipeline

Interactive Pipeline Flow

Architecture diagrams

Discussion

Authorization Code + PKCE is the modern secure standard for all client types.

The pipeline

Interactive Pipeline Flow

Architecture diagrams

Discussion