Does OpenID Connect standardize the OAuth 2 Authorization Endpoint?

1
votes

Does OpenID Connect standardize the OAuth 2 Authorization Endpoint? IIUC the OAuth spec allows providers to vary the endpoints, so just curious if OpenID Connect locks it to a specific URI value?

1
httpsecurityoauth-2.0openid-connect

1 Answers

3
votes

No it doesn't. But what it does do, is specify how to discover the URL of the correct endpoint, using:

GET /.well-known/openid-configuration HTTP/1.1

And then pick the authorization_endpoint. Here and here are two real world examples.