I wrote a blog post on OAuth2 thoughts

Question

I wrote a blog post on OAuth2 thoughts <https www ory sh oauth2 openid connect do you need use cases examples >

numerous-umbrella-61726 · Answer

looks like the fosite link goes to hydra

numerous-umbrella-61726 · Answer

also they both go to the pull requests page instead of the main repo page but maybe that was intentional

high-optician-2097 · Answer

ha nice find thanks

numerous-umbrella-61726 · Answer

this is a lot of great information thank you

numerous-umbrella-61726 · Answer

i think my only feedback may be to put the convince your peers section higher as i think most people coming across this post will likely have these or similar questions so it provides some good context going in

high-optician-2097 · Answer

you re welcome thank you for providing feedback slightly smiling face got it i think the idea behind having it as the last item was to first explain the difficulties and then draw from those explanations because now they should be obvious and provide some easy things people can say

silly-magazine-7905 · Answer

Great read Only a few spelling amp grammatical errors

high-optician-2097 · Answer

Thank you Omar If you want you can make a PR for this document slightly smiling face I would highly appreciate it <https github com ory web blob master src markdown blog oauth2 use cases examples mdx>

silly-magazine-7905 · Answer

Sure thing

high-optician-2097 · Answer

thank you

silly-magazine-7905 · Answer

Sorry it took so long Our release partner at work needed help so had to take care of that <https github com ory web pull 503>

bulky-architect-22083 · Answer

Excellent article I think I need to read this a couple of times to completely digest all the material that is covered smiley I like the scopes are not permissions part At my company we are planning to use Kratos OSS for Identity management However we have different teams developing different services with their own user profiles What we wanted was a core Identity Management Platform for managing user authentication and authorization from different services So we decided to let Kratos manage only the email and password of each service and use Ory Hydra on top of Kratos We decided to use scope to manage the service scope i e to identify the service that the user is allowed to login to because we wanted to keep service scope out of the user profiles Would like your opinion on this pray skin tone 4

high-optician-2097 · Answer

what you re looking for is not the scope but the audience

high-optician-2097 · Answer

so e g this session is intended for the audience server x

bulky-architect-22083 · Answer

Ah That makes a lot of sense Thank you pray I always wondered what role audience played and got that Aha moment now grinning

high-optician-2097 · Answer

nice

bulky-architect-22083 · Answer

And this makes sense too awesome <https www ory sh hydra docs advanced audience|https www ory sh hydra docs advanced audience> Setting the audience actually removes a lot of headaches from them implementation side smiley