!!! Overview [{$pagename}] are specific Implementations of an [Authorization Grant] or [Grant Types] within [OAuth 2.0] for [OpenID Connect] or [User-Managed Access] [{$pagename}] are extensions of [Authorization Grants] !! [{$pagename}] and [Security] Where Higher Numbers are better: %%zebra-table %%sortable %%table-filter ||Level||[Grant Types]||Remarks||[Client|OAuth Client] Options |4|[Hybrid Flow]|[Authorization Request] Protected|[request_object_encryption_alg] \\ [request_object_signing_alg] |3|[Hybrid Flow]|[Authorization Response] Protected|[id_token_encrypted_response_alg] \\ [id_token_signed_response_alg] |2|[Code|Authorization Code Grant]|[Client|OAuth Client] [Authentication]|[token_endpoint_auth_method]=[private_key_jwt] \\ [token_endpoint_auth_method]=[client_secret_basic] |1|[Implicit Grant]|NO [Client|OAuth Client] [Authentication]|none |0|[Implicit Grant] / [Code|Authorization Code Grant]|NO [Integrity]|Without [id_token], missing [nonce] and [at_hash] /% /% /% !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }]