@evan no, I mean, I don't see why it'd make sense to define a custom profile of OAuth 2.0 when OIDC exists and we could just use it?
What does defining a custom profile really give us? Our authentication needs can't be that unique, can they?
@evan no, I mean, I don't see why it'd make sense to define a custom profile of OAuth 2.0 when OIDC exists and we could just use it?
What does defining a custom profile really give us? Our authentication needs can't be that unique, can they?
@aaronpk that's perhaps fair, though I think OIDC smooths out a lot of OAuth 2.0's rough edges