Security POC APP

Terminology / Flows / Diagrams

Diagrams of All The OpenID Connect Flows

Understanding OAuth 2.0 and OpenID Connect

A Guide To OAuth 2.0 Grants + Flows

OAuth 2.0 Simplified

The Resource Server

Which OAuth 2.0 Flow Should I Use?

Authorization Code Grant Type

OAuth 2.0 Grant Types

Spring Official Docs

Spring Security Docs

Spring - OAuth2

Tutorials

Baeldung - Spring Security 5 – OAuth2 Login - Client

Baeldung - Spring Security 5 - OAuth 2.0 Resource Server

Baeldung - Embedded Keycloak

Implementation Libraries

Certified OpenID Connect Implementations - List 1

Certified OpenID Connect Implementations - List 2

StackOverflow

How to validate an OAuth 2.0 access token for a resource server?

How to identify the "client application" at the "resource server" in a OIDC/OAuth2 flow

Difference between grant type: 'client_credentials' and 'password' in Authentication Flow?