Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

3
  • 2
    There's an excellent explanation about the concepts behind OAuth and OpenID Connect here: developer.okta.com/blog/2019/10/21/… (The concepts are the same regardless of whether you use a third party or host your own identity server) Commented Feb 26, 2021 at 1:04
  • I am not clear on the requirements. Are you saying that people who use your app should also be able to access these third party services? Or are you expecting the third party services to access your REST API? Or something else? Commented Feb 26, 2021 at 18:31
  • It's not a good idea to implement your own security code especially if you aren't a security expert. I assume that the concern with using a third party solution is cost? If so, I suggest keycloak.org. It's free and open source and easy to use. Commented Mar 6, 2021 at 18:44