summaryrefslogtreecommitdiff
path: root/docs/oauth2/oidc/grants.rst
blob: aa1f70f9301da16f58c464ccf58b9e3c20a7d1c7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
===========
Grant types
===========

The OpenID Connect specification adds a new `Hybrid` flow and adds
variants to the existing `Authorization Code` and `Implicit`
flows. They share the same principle: having `openid` in the scope and
a combination of new `response_type` values.


.. list-table:: OpenID Connect "response_type" Values
   :widths: 50 50
   :header-rows: 1

   * - "response_type" value
     - Flow
   * - `code`
     - Authorization Code Flow
   * - `id_token`
     - Implicit Flow
   * - `id_token token`
     - Implicit Flow
   * - `code id_token`
     - Hybrid Flow
   * - `code token`
     - Hybrid Flow
   * - `code id_token token`
     - Hybrid Flow


Special Dispatcher classes have been made to dynamically route the HTTP
requests to either an OAuth2.0 flow or an OIDC flow. It basically
checks the presence of `openid` scope in the parameters.

.. toctree::
   :maxdepth: 2

   dispatchers
   authcode
   implicit
   hybrid