LDAPWiki: OpenID Connect Flows

Overview#

OpenID Connect Flows are specific Implementations of an Authorization Grant or Grant Types within OAuth 2.0 for OpenID Connect or User-Managed Access

OpenID Connect Flows are extensions of Authorization Grants

Where Higher Numbers are better:

Level	Grant Types	Remarks	Client Options
4	Hybrid Flow	Authorization Request Protected	request_object_encryption_alg request_object_signing_alg
3	Hybrid Flow	Authorization Response Protected	id_token_encrypted_response_alg id_token_signed_response_alg
2	Code	Client Authentication	token_endpoint_auth_method=private_key_jwt token_endpoint_auth_method=client_secret_basic
1	Implicit Grant	NO Client Authentication	none
0	Implicit Grant / Code	NO Integrity	Without id_token, missing nonce and at_hash

There might be more information for this subject on one of the following: