Openid connect

As explained in .NET MAUI in Action

OpenID Connect is an identity layer built on OAuth 2.0 that enables clients to verify user identity and obtain identity claims.

OpenID Connect (OIDC) extends OAuth 2.0 so a .NET MAUI app can authenticate users through a web browser and obtain a token for protected API calls. section 8.1.2

The app sends users to an IdentityServer login page instead of collecting passwords. After login, the identity provider redirects back with a code that the client exchanges for a JSON Web Token. section 8.1.2

A practical MAUI integration uses these pieces:

• Configure the authority, client ID, scopes, and redirect URI in OidcClientOptions. section 8.1.2
• Use WebAuthenticator through a browser adapter to display the provider login page and parse its response. section 8.1.2
• Register the custom redirect scheme on Android, iOS, macOS, and Windows so the operating system returns the response to the app. section 8.1.2

Figure 8.3 Step 1: Call the LoginAsync method of the OidcClient package. Step 2: The OidcClient package will call WebAuthenticator and display the login page on IdentityServer. Step 3: The user will log in to IdentityServer. Step 4: IdentityServer returns the result via WebAuthenticator. Step 5: The parsed result is returned to OidcClient. Step 6: OidcClient extracts the JWT from the result and returns it to the caller of the LoginAsync method.

Trace the six-step login path from LoginAsync through WebAuthenticator and IdentityServer to the returned JWT. section 8.1.2

How .NET MAUI in Action covers it

How deep it goes

Explains browser login, redirect handling, token exchange, and platform registration, but not identity theory in depth.

Examples

Uses a MAUI stock-taking app, IdentityServer, OidcClient, custom redirect schemes, and platform manifest configurations.

What it assumes

Assumes basic familiarity with identity, authentication, authorization, OAuth 2.0, and .NET MAUI application development.

What you can do after

Build it from scratch by configuring OidcClient, implementing browser authentication, and registering platform callbacks.

How it connects

Connects OAuth 2.0, IdentityServer, identity providers, JSON Web Tokens, WebAuthenticator, and refresh tokens.

liveBookmanning.com

Read .NET MAUI in Action on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Software Security for DevelopersOpenID Connect is an identity layer built on OAuth 2.0 that enables clients to verify an end user's identity and obtain basic profile information.
• 

  liveBookmanning.com
  ASP.NET Core in Action, 3eOpenID Connect is an authentication protocol built on OAuth 2.0 that adds conventions, discovery, and user-identity authentication to delegated authorization flows.
• 

  liveBookmanning.com
  Effective Platform EngineeringOpenID Connect is an identity layer built on OAuth 2.0 that enables clients to verify user identity and obtain standardized identity claims.
• 

  liveBookmanning.com
  Secure APIsOpenID Connect is an identity layer on top of OAuth 2.0 that enables clients to verify an end user's identity and obtain basic profile claims.
• 

  liveBookmanning.com
  Terraform in Depth: Infrastructure as Code with Terraform and OpenTofuOpenID Connect is an identity layer built on OAuth 2.0 that enables clients to verify a user's identity and obtain basic profile information from an authorization server.
• 

  liveBookmanning.com
  .NET in Action, Second EditionOpenID Connect is an identity layer built on OAuth 2.0 that enables clients to verify user identities and obtain basic profile information.
• 

  liveBookmanning.com
  Spring Security in Action, Second Editionoidc is a configuration method that enables OpenID Connect support in an authorization server.
• 

  liveBookmanning.com
  Building Distributed Applications that WorkOpenID Connect is an identity layer built on OAuth 2.0 that enables clients to verify user identity and obtain basic profile information.
• 

  liveBookmanning.com
  Quarkus in ActionOpenID Connect is an identity layer built on OAuth 2.0 that enables clients to verify user identity and obtain authentication claims.
• 

  liveBookmanning.com
  GitHub Actions in Action: Continuous integration and delivery for DevOpsOpenID Connect is an identity layer built on OAuth 2.0 that enables clients to verify user identity and obtain basic profile claims.
• 

  liveBookmanning.com
  Build Python Web Apps with StreamlitOpenID Connect is an authentication protocol built on OAuth 2.0 that lets applications verify user identity through an identity provider.
• 

  liveBookmanning.com
  Authorization in ActionOpenID Connect is an identity layer built on OAuth 2.0 that enables clients to verify user identity and obtain basic profile information from an authorization server.

Compare how 13 books explain openid connect →

Related concepts

• OAuthuses · OAuth is an authorization framework that enables a client to obtain limited, delegated access to protected resources without receiving the resource owner's credentials.
• OpenID Connect ID tokenproduces · An OpenID Connect ID token is a signed token containing claims about an authenticated end user, the authentication event, and the client for which it was issued.
• authenticationimplements · Authentication is the process of establishing or verifying the identity of a user, service, device, or other communicating entity.
• single sign-onused by · Single sign-on is an authentication arrangement in which one authentication event enables a user to access multiple applications or services without signing in separately to each.
• Security Assertion Markup Languagealternative to · Security Assertion Markup Language is an XML-based standard for exchanging authentication, identity, and authorization assertions between identity providers and service providers.
• Duende IdentityServerimplemented by · Duende IdentityServer is a .NET framework for implementing identity, authentication, authorization, and token services using established identity protocols.

This explainer was generated by Manning's knowledge graph from the text of .NET MAUI in Action. The section links point to the parts of the book it draws on.