summaryrefslogtreecommitdiff
path: root/docs/oauth2/oidc/grants.rst
diff options
context:
space:
mode:
Diffstat (limited to 'docs/oauth2/oidc/grants.rst')
-rw-r--r--docs/oauth2/oidc/grants.rst41
1 files changed, 41 insertions, 0 deletions
diff --git a/docs/oauth2/oidc/grants.rst b/docs/oauth2/oidc/grants.rst
new file mode 100644
index 0000000..aa1f70f
--- /dev/null
+++ b/docs/oauth2/oidc/grants.rst
@@ -0,0 +1,41 @@
+===========
+Grant types
+===========
+
+The OpenID Connect specification adds a new `Hybrid` flow and adds
+variants to the existing `Authorization Code` and `Implicit`
+flows. They share the same principle: having `openid` in the scope and
+a combination of new `response_type` values.
+
+
+.. list-table:: OpenID Connect "response_type" Values
+ :widths: 50 50
+ :header-rows: 1
+
+ * - "response_type" value
+ - Flow
+ * - `code`
+ - Authorization Code Flow
+ * - `id_token`
+ - Implicit Flow
+ * - `id_token token`
+ - Implicit Flow
+ * - `code id_token`
+ - Hybrid Flow
+ * - `code token`
+ - Hybrid Flow
+ * - `code id_token token`
+ - Hybrid Flow
+
+
+Special Dispatcher classes have been made to dynamically route the HTTP
+requests to either an OAuth2.0 flow or an OIDC flow. It basically
+checks the presence of `openid` scope in the parameters.
+
+.. toctree::
+ :maxdepth: 2
+
+ dispatchers
+ authcode
+ implicit
+ hybrid