Role of Trust in OAuth 2.0 and OpenID Connect
Cryptography and Security
2018-11-26 v3
Abstract
OAuth 2.0 is a framework for authorization. Being a framework, OAuth 2.0 allows extensions to build on top of it. OpenID Connect is one such extension which adds authentication layer using identity details. OAuth 2.0 define several roles that are required to complete the protocol. Both OAuth 2.0 and OpenID Connect involve interactions between these roles. These interactions require a pre-established trust or a trust establishment while protocol operate. This paper analyzes trust establishments between OAuth 2.0 roles and discuss important aspects of them. Such analysis is required for proper understanding of the protocols.
Keywords
Cite
@article{arxiv.1808.10624,
title = {Role of Trust in OAuth 2.0 and OpenID Connect},
author = {Kavindu Dodanduwa and Ishara Kaluthanthri},
journal= {arXiv preprint arXiv:1808.10624},
year = {2018}
}
Comments
2018 IEEE International Conference on Information and Automation for Sustainability (ICIAfS)