Tag
openid-connect
- Apr 6, 2026 ID Tokens: Validating the Claims That Establish Who the User Is The claim set OpenID Connect adds to a JWT, the ordered checks a client must perform, and why a valid signature is the least interesting part of validation. internet protocols
- Mar 24, 2026 Discovery Metadata and the Key Set Rotation Problem How a well-known document bootstraps trust in endpoints and signing keys, and what an implementation must do when the published key set changes underneath it. internet protocols
- May 2, 2024 Federated Session State: Logout, Propagation, and the Limits of Single Sign-Out Why a logout at one relying party cannot reliably end sessions at others, how back-channel and front-channel logout differ, and what session identifiers can and cannot carry. internet protocols