Sample OIDC Client Application

Sample OIDC Client Application following OAuth 2.0 Security Best Current Practice.

Specs

• TLS
• OAuth 2.0 (RFC6749) / OIDC
  • Authorization Code Grant
  • Scope claim
  • Audience claim
  • State value
  • Nonce value
• Proof Key for Code Exchange by OAuth Public Clients (RFC7636)
• OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens (RFC8705)
• OAuth 2.0 Form Post Response Mode

Precautions

• This sample source code is provided "as is" without warranty of any kind.
• We don't take responsibility for any damage by using this sample source code.

License

• Apache License, Version 2.0