OpenID Connect · OAuth 2.0
ID-Kit plays the role you are missing, runs the flow of your choice and verifies every token. And if you do not know which flow to use, the guide tells you.
Your application is the client (RP). ID-Kit plays the OIDC provider: discovery, keys, authorize, token, userinfo… with as many errors as you like.
Create a test providerEntra ID, Okta, Keycloak, Auth0… ID-Kit plays the application: it starts the flow and checks the identity token, the audience, the nonce and the signature.
Create a test applicationThe guide
Code + PKCE, hybrid, implicit, client credentials, device… why they exist and which one to use.
3 minutes
OAuth 2.0 versus OpenID Connect, the three tokens, the endpoints, discovery.