Blog of Dinuksha Ishwari

This blog post is about OAuth 2.0 Dynamic Client Registration specified in  https://tools.ietf.org/html/rfc7591  and how to register your Application with the WSO2 Identity Server dynamically. Initially, we have to discover the end user's OpenID provider using OpenID discovery before we are able to use any OAuth service in our Application. Step 1: Discovery In order to do that we must send a request to the OpenID Connect Discovery endpoint specified in  https://openid.net/specs/openid-connect-discovery-1_0.html#IssuerDiscovery  using WebFinger .  WebFinger allows to discover about any entity on the Internet that are identified by a URI that uses standard HTTP. It returns a JSON object which is referred to as JRD (JSON Resource Descriptor) . OpenID Connect Discovery is, https://localhost:9443/.well-known/webfinger Since we do not have an access token we can use the admin credentials to the WSO2 Identity Server to send the request as...

Introduction OAuth 2.0 is creating a lot of hype in the web service and software industry around the globe. And we often hear many IT products and services adapting to it. Simply put, "OAuth 2.0 is a protocol that allows distinct parties to share information and resources in a secure & reliable manner. "               -  Charles Bihis . (2015).  Mastering OAuth 2.0 Now a days web applications are used very widely for almost every task. But it is difficult to remember separate credentials to each and every application. This is the basic problem OAuth tries to address. Best example is where Instagram allows you to login to Instagram using your Facebook account. This feature is powered by OAuth Protocol. Before diving deeper into OAuth 2.0 it is important to understand what the following keywords mean. Authentication - validating if the person is who he says he is. Authorization - what actions a person is allowed to ...